SinisterChat
I got a VPS for the sole purpose of setting up OpenVPN
This is my first time configuring OpenVPN so I have no idea what to do at.
My goal is to tunnel Browsing/Applications/Games through the OpenVZ VPS.
My host configures TUN/TAP themselves and did so before I installed OpenVPN.
In the configuration, my main question is am I using server or server-bridge?
and dev tun, dev tap, or dev tap0 as I have it now? I followed advice from another thread and set up iptables forwarding. Everything is below.
Server Config:
local 108.174.XXX.XXX
port 443
proto udp
;dev tap
;dev tun
dev tap0
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
;server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
comp-lzo
max-clients 2
user hades
group none
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 3
;mute 20
/etc/network/interfaces
auto lo
iface lo inet loopback
# Auto generated venet0 interface
auto venet0
iface venet0 inet manual
up ifconfig venet0 up
up ifconfig venet0 127.0.0.2
up route add default dev venet0
down route del default dev venet0
down ifconfig venet0 down
iface venet0 inet6 manual
auto venet0:0
iface venet0:0 inet static
address 108.174.XXX.XXX
netmask 255.255.255.255
IPTABLES stuff:
iptables -A INPUT -p udp --dport 443 -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -o venet0 -j SNAT --to-source 108.174.XXX.XXX
echo 1 > /proc/sys/net/ipv4/ip_forward
