Two of my friends are in College/UNI in the UK and can't connect to a lot of services (e.g. teamspeak, most video games) on their internet connection. I'm trying to setup a VPN from a server I have with OVH. I've installed Ubuntu 14.10 on a virtual machine on that server and installed openvpn by following this tutorial: https://jimshaver.net/2014/11/30/setting-up-an-openvpn-server-on-ubuntu-14-10/ My friend can connect and the openvpn client gives no error messages, however when connecting to a website like whatismyip.com she still gets her college IP instead of the IP of the OVH server. I've tried the following config: This gives her the IP: 192.168.1.100 from the openvpn client, her external IP is not changed. [code]mode server tls-server local 92.222.150.57 port 80 proto tcp dev tap0 up "/etc/openvpn/up.sh br0 tap0 1500" down "/etc/openvpn/down.sh br0 tap0" persist-key persist-tun ca ca.crt cert server.crt key server.key dh dh2048.pem tls-auth ta.key 0 cipher BF-CBC comp-lzo ifconfig-pool-persist ipp.txt server-bridge 192.168.1.1 255.255.255.0 192.168.1.100 192.168.1.110 route 92.222.150.57 255.255.255.252 push "route 92.222.150.57 255.255.255.252" push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 8.8.8.8" max-clients 5 user nobody group nogroup keepalive 10 120 status openvpn-status.log verb 3[/code] and I've also tried it with [code] server-bridge 92.222.150.57 255.255.255.252 92.222.150.59 92.222.150.59 push "route 92.222.150.58 255.255.255.252" push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 8.8.8.8" [/code] This gives her the IP: 92.222.150.59 from the openvpn client, her external IP is not changed. I prefer to get method one working, where the clients get a private 192.168.1.x IP and externally get the IP: 92.222.150.57 (since I have two friends who'd like to make use of this, and I don't want to waste my IP's on them if not needed) but I don't know if that is possible.

[quote="gijs007"]I've tried the following config: This gives her the IP: 192.168.1.100 from the openvpn client, her external IP is not changed. Code:[/quote]This config is more or less correct .. [quote="gijs007"]and I've also tried it with Code: server-bridge 92.222.150.57 255.255.255.252 92.222.150.59 92.222.150.59[/quote]This is absolutely wrong !

I presume you have a private IP to bridge with ? because this is also very bad idea .. especially using a bridge ! [quote="gijs007"]local 92.222.150.57[/quote]

No I only have the public IP. I basically want this VPN to work as an encrypted proxy for all trafic. (since a normal proxy only works for the browser and games and such can't use it)

If you only have one IP then try this: [url]https://forums.openvpn.net/post48366.html#p48366[/url]

I've tried that, but the external IP is still the same. :( [code]mode server tls-server local 92.222.150.57 port 80 proto tcp ;dev tun dev tap0 up "/etc/openvpn/up.sh br0 tap0 1500" down "/etc/openvpn/down.sh br0 tap0" persist-key persist-tun ca ca.crt cert server.crt key server.key dh dh2048.pem tls-auth ta.key 0 cipher BF-CBC comp-lzo ifconfig-pool-persist ipp.txt ;server-bridge 192.168.1.1 255.255.255.0 192.168.1.100 192.168.1.110 ;route 92.222.150.57 255.255.255.252 ;push "route 92.222.150.57 255.255.255.252" server 10.149.50.0 255.255.255.0 client-to-client topology subnet ;push "route 92.222.150.58 255.255.255.252" ;push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 8.8.4.4" max-clients 5 user nobody group nogroup keepalive 10 120 status openvpn-status.log verb 3 [/code]

Use NAT ... [list][url=http://openvpn.net/index.php/open-source/documentation/howto.html#redirect][color=#d2d2Ff].[/color][/url][/list]

How do I use NAT with openvpn on Ubuntu?

Use iptables .. [url]https://help.ubuntu.com/community/IptablesHowTo[/url]

[code]gijs@ubuntu:~$ ifconfig br0 Link encap:Ethernet HWaddr 02:00:00:54:0c:56 inet addr:92.222.150.57 Bcast:92.222.150.59 Mask:255.255.255.252 inet6 addr: fe80::ff:fe54:c56/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:242272 errors:0 dropped:222 overruns:0 frame:0 TX packets:50231 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:9899712 (9.8 MB) TX bytes:4109952 (4.1 MB) eth0 Link encap:Ethernet HWaddr 02:00:00:54:0c:56 UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1 RX packets:242279 errors:0 dropped:0 overruns:0 frame:0 TX packets:50236 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:13840112 (13.8 MB) TX bytes:4110370 (4.1 MB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) tap0 Link encap:Ethernet HWaddr c6:ae:49:ce:09:e8 inet addr:10.149.50.1 Bcast:10.149.50.255 Mask:255.255.255.0 inet6 addr: fe80::c4ae:49ff:fece:9e8/64 Scope:Link UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:193354 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 B) TX bytes:10084011 (10.0 MB) [/code] File: /etc/network/interfaces [code] # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). # The loopback network interface auto lo iface lo inet loopback # The primary network interface auto eth0 iface eth1 inet manual #iface eth0 inet static # address 92.222.150.57 # netmask 255.255.255.252 # network 92.222.150.56 # broadcast 92.222.150.59 # gateway 92.222.150.58 # dns-* options are implemented by the resolvconf package, if installed # dns-nameservers 8.8.8.8 auto lo br0 iface lo inet loopback iface br0 inet static address 92.222.150.57 netmask 255.255.255.252 gateway 92.222.150.58 dns-nameserver 8.8.4.4 bridge_ports eth0 iface eth0 inet manual up ip link set $IFACE up promisc on down ip link set $IFACE down promisc off [/code]

I've tried iptables -I FORWARD -i tun0 -o eth0 \ -s 10.149.50.0/24 -d 92.222.150.57/32 \ -m conntrack --ctstate NEW -j ACCEPT and iptables -I FORWARD -i tap0 -o eth0 \ -s 10.149.50.0/24 -d 92.222.150.57/32 \ -m conntrack --ctstate NEW -j ACCEPT but with no succes :(

client doesn't get external IP from VPN server

Traffic

gijs007 wrotekeepalive 2 10

You may find your server --keepalive is a little harsh .. try --keepalive 5 30 (or even 10 60)

« Previous Page