Welcome,
My first post on this forum - so if this is the wrong place please forgive me.
This subject has been mentioned a few times but after weeks of searching I'm still no way closer to solution of my problem.
I'm running my small media server using Ubuntu
Ubuntu 14.04.1 LTS (GNU/Linux 3.13.0-32-generic i686)
My server has apache installed (PHP+MySQL) nothing special
Server version: Apache/2.4.7 (Ubuntu)
I'm also running uttorent severe and plex
I'm using openvpn to connect to cyberghostvpn.com
This is my config file:
client
remote gb-openvpn.cyberghostvpn.com 20
dev tun
proto udp
auth-user-pass /etc/openvpn/vpn/login.conf
ca /etc/openvpn/vpn/ca.crt
cert /etc/openvpn/vpn/client.crt
key /etc/openvpn/vpn/client.key
log-append /etc/openvpn/vpn/run.log
resolv-retry infinite
redirect-gateway def1
persist-key
persist-tun
nobind
cipher AES-256-CBC
auth MD5
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5
tun-mtu 1500
fragment 1300
mssfix 1300
verb 4
comp-lzo
Everything is working fine locally (LAN) but every time I'm connected to vpn I'm unable to ssh or get access to my server using HTTP/HTTPS from outside LAN
I have my router configured so if VPN is not running I can use my router WAN IP to connect to my server - no problem
tested using
/usr/sbin/tcpdump -n -s 0 -i any port 22
/usr/sbin/tcpdump -n -s 0 -i any port 80
/usr/sbin/tcpdump -n -s 0 -i any port 443
The moment I connect to VPN this functionality is gone but works fien for LAN IP. I have been trying to fix that problem for a very long time but it looks like I keep finding the same post leading nowhere
Below I included as much info as possible about status of my server/network (with active vpn connection)
root@USERVER:/# netstat -planet | grep 'LISTEN '
tcp 0 0 0.0.0.0:32401 0.0.0.0:* LISTEN 105 10030 785/Plex Media Serv
tcp 0 0 0.0.0.0:37396 0.0.0.0:* LISTEN 105 13508 1517/Plex Plug-in [
tcp 0 0 0.0.0.0:32469 0.0.0.0:* LISTEN 105 10587 1287/Plex DLNA Serv
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 10395 927/sshd
tcp 0 0 0.0.0.0:36921 0.0.0.0:* LISTEN 105 13631 1551/Plex Plug-in [
tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 0 9492 518/smbd
tcp 0 0 0.0.0.0:6881 0.0.0.0:* LISTEN 1000 9422 629/utserver
tcp 0 0 0.0.0.0:39812 0.0.0.0:* LISTEN 105 11332 1068/Plex Plug-in [
tcp 0 0 0.0.0.0:1446 0.0.0.0:* LISTEN 105 10580 1287/Plex DLNA Serv
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 106 10207 981/mysqld
tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 0 9493 518/smbd
tcp 0 0 0.0.0.0:32400 0.0.0.0:* LISTEN 105 10029 785/Plex Media Serv
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1000 9441 629/utserver
tcp 0 0 127.0.0.1:10000 0.0.0.0:* LISTEN 1000 9424 629/utserver
tcp6 0 0 :::22 :::* LISTEN 0 10397 927/sshd
tcp6 0 0 :::443 :::* LISTEN 0 10186 1083/apache2
tcp6 0 0 :::445 :::* LISTEN 0 9490 518/smbd
tcp6 0 0 :::6881 :::* LISTEN 1000 9423 629/utserver
tcp6 0 0 :::139 :::* LISTEN 0 9491 518/smbd
tcp6 0 0 :::80 :::* LISTEN 0 10182 1083/apache2
tcp6 0 0 :::8080 :::* LISTEN 1000 9442 629/utserver
fox@USERVER:~$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: p4p1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 94:de:80:52:2b:0a brd ff:ff:ff:ff:ff:ff
inet 192.168.0.60/24 brd 192.168.0.255 scope global p4p1
valid_lft forever preferred_lft forever
inet6 fe80::96de:80ff:fe52:2b0a/64 scope link
valid_lft forever preferred_lft forever
3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100
link/none
inet 10.129.32.114 peer 10.129.32.113/32 scope global tun0
valid_lft forever preferred_lft forever
fox@USERVER:~$ ip route
0.0.0.0/1 via 10.129.32.113 dev tun0
default via 192.168.0.1 dev p4p1
10.129.0.1 via 10.129.32.113 dev tun0
10.129.32.113 dev tun0 proto kernel scope link src 10.129.32.114
78.110.172.101 via 192.168.0.1 dev p4p1
128.0.0.0/1 via 10.129.32.113 dev tun0
192.168.0.0/24 dev p4p1 proto kernel scope link src 192.168.0.60
fox@USERVER:~$ ip -s link
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
RX: bytes packets errors dropped overrun mcast
4469184 28074 0 0 0 0
TX: bytes packets errors dropped carrier collsns
4469184 28074 0 0 0 0
2: p4p1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
link/ether 94:de:80:52:2b:0a brd ff:ff:ff:ff:ff:ff
RX: bytes packets errors dropped overrun mcast
3324959 18349 0 0 0 0
TX: bytes packets errors dropped carrier collsns
12458374 20804 0 0 0 0
3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN mode DEFAULT group default qlen 100
link/none
RX: bytes packets errors dropped overrun mcast
36670 363 0 0 0 0
TX: bytes packets errors dropped carrier collsns
68672 514 0 0 0 0
I read a lot about bridge connection any some other stuff but my linux skills are probably not good enough :-/
All I'm trying to do is to hide my utorrent traffic and keep my www server and ssh available from outside LAN - is it possible?
Thank you in advance!
