Hi all,
I'm here to ask you help on a VPN issue on my OVH VPS (running under OpenVZ).
Goal: On my VPS, connect to my VPN (HideMyAss) via openVPN. So, the VPS is the client here.
Problem: When connecting, my ip does not change. (launched openvpn with sudo)
openVPN logs:
Connecting to:
%Some VPN% 79.XXX.XX.XXX
Loading configuration...
Your IP is 37.XXX.XX.XXX
Mon Jul 28 19:23:03 2014 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Enter Auth Username:%USERNAME%
Enter Auth Password:
Mon Jul 28 19:23:18 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon Jul 28 19:23:18 2014 Control Channel MTU parms [ L:1573 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 28 19:23:18 2014 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Mon Jul 28 19:23:18 2014 Local Options hash (VER=V4): 'f61b8fe4'
Mon Jul 28 19:23:18 2014 Expected Remote Options hash (VER=V4): '56af8162'
Mon Jul 28 19:23:18 2014 UDPv4 link local: [undef]
Mon Jul 28 19:23:18 2014 UDPv4 link remote: [AF_INET]79.XXX.XX.XXX:53
Mon Jul 28 19:23:18 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Jul 28 19:23:18 2014 VERIFY OK: depth=1, /C=GB/ST=London/L=London/O=Privax_Ltd/OU=HMA_Pro_VPN/CN=hidemyass.com/name=HMA/emailAddress=
info@privax.com
Mon Jul 28 19:23:18 2014 VERIFY OK: nsCertType=SERVER
Mon Jul 28 19:23:18 2014 VERIFY OK: depth=0, /C=GB/ST=London/L=London/O=Privax_Ltd/OU=HMA_Pro_VPN/CN=server/emailAddress=
info@privax.com
Mon Jul 28 19:23:18 2014 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1573', remote='link-mtu 1541'
Mon Jul 28 19:23:18 2014 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
Mon Jul 28 19:23:18 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 28 19:23:18 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 28 19:23:18 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 28 19:23:18 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 28 19:23:18 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 28 19:23:18 2014 [server] Peer Connection Initiated with [AF_INET]79.XXX.XX.XXX:53
Mon Jul 28 19:23:22 2014 TUN/TAP device tun0 opened
Mon Jul 28 19:23:22 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jul 28 19:23:22 2014 /sbin/ifconfig tun0 10.XXX.X.XXX netmask 255.255.252.0 mtu 1500 broadcast 10.XXX.XX.XXX
Mon Jul 28 19:23:22 2014 NOTE: unable to redirect default gateway -- Cannot read current default gateway from system
*******************************************
* *
* You are now connected to HMA Pro! VPN *
* *
*******************************************
Checking new IP address...
Mon Jul 28 19:23:22 2014 Initialization Sequence Completed
Your IP is 37.XXX.XX.XXX
An ifconfig:
lo Link encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
adr inet6: ::1/128 Scope:Hôte
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:268 errors:0 dropped:0 overruns:0 frame:0
TX packets:268 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:22644 (22.1 KiB) TX bytes:22644 (22.1 KiB)
venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet adr:127.0.0.2 P-t-P:127.0.0.2 Bcast:0.0.0.0 Masque:255.255.255.255
adr inet6: 2001:41d0:52:300::765/56 Scope:Global
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:15166 errors:0 dropped:0 overruns:0 frame:0
TX packets:10547 errors:0 dropped:4 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:1463487 (1.3 MiB) TX bytes:2195798 (2.0 MiB)
venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet adr:37.XXX.XX.XXX P-t-P:37.XXX.XX.XXX Bcast:37.XXX.XX.XXX Masque:255.255.255.0
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
and a ip route give me:
37.XXX.XX.X/24 dev venet0 proto kernel scope link src 37.XXX.XX.XXX
default dev venet0 scope link
I ask my provider (OVH) they accept VPN connection, hidemyass apparently see my connections.
So my VPS correctly connect to the VPN, but when i curl a page, it does not use the vpn connection i think...
I read things about the venet0 and veth, use no-ip free dns to get static ip, i stop my fail2ban to test if it was not it, try a lot of things like push redirect-gateway [local] def1 in HMA server config...
I read a lot of things since few day but no i'm really stock, so if anyone have an idea, i'll be grateful, thank you a lot.
