Connexion by school proxy

gotexx

Hello,
I would like to connect my a VPN server that is on a VPS ovh. I'm in a school that has a proxy to manage all students access.

Only I have the impression that the proxy blocking the connection to my VPN and I do not know how to fix it ..

hugo@hugo-X751LX:~$ sudo openvpn --config /home/hugo/Téléchargements/client.ovpn[sudo] password for hugo: 
Fri Mar 25 15:04:41 2016 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec  1 2014
Enter Auth Username:hugo
Enter Auth Password:
Fri Mar 25 15:04:46 2016 Control Channel Authentication: tls-auth using INLINE static key file
Fri Mar 25 15:04:46 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 25 15:04:46 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 25 15:04:46 2016 Socket Buffers: R=[87380->200000] S=[16384->200000]
Fri Mar 25 15:04:46 2016 Attempting to establish TCP connection with [AF_INET]51.255.44.255:443 [nonblock]
Fri Mar 25 15:04:47 2016 TCP connection established with [AF_INET]51.255.44.255:443
Fri Mar 25 15:04:47 2016 TCPv4_CLIENT link local: [undef]
Fri Mar 25 15:04:47 2016 TCPv4_CLIENT link remote: [AF_INET]51.255.44.255:443
Fri Mar 25 15:04:47 2016 Connection reset, restarting [-1]
Fri Mar 25 15:04:47 2016 SIGUSR1[soft,connection-reset] received, process restarting
Fri Mar 25 15:04:47 2016 Restart pause, 5 second(s)
Fri Mar 25 15:04:52 2016 Control Channel Authentication: tls-auth using INLINE static key file
Fri Mar 25 15:04:52 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 25 15:04:52 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 25 15:04:52 2016 Socket Buffers: R=[87380->200000] S=[16384->200000]
Fri Mar 25 15:04:52 2016 Attempting to establish TCP connection with [AF_INET]51.255.44.255:443 [nonblock]
Fri Mar 25 15:04:53 2016 SIGINT[hard,init_instance] received, process exiting

Ty for your help 🙂
Sorry for my english i'm French 😉

Traffic

gotexx wrotem in a school that has a proxy to manage all students access.

Only I have the impression that the proxy blocking the connection to my VPN and I do not know how to fix it

I would ask the school for permission ..

Avril

Hey, did you try to use another proxy services or servers for this? You may try http://advanced.name, and many others.

jaishree

You have to ask your school admin for allow IP permission.

cakomet

The log shows the TCP connection completes but then immediately resets, that's a classic sign of deep packet inspection (DPI). The proxy is fingerprinting the OpenVPN handshake and killing it, even over port 443, since the port isn't blocked, just the protocol itself is being detected.
Best fix is to wrap your OpenVPN traffic with stunnel so it looks like standard TLS traffic, hiding the OpenVPN signature entirely. I have found this to be the most reliable option against school-level proxies. If your server supports it, enabling the scramble/XOR obfuscation patch is another option. Shadowsocks is also worth trying since it's built specifically to evade this kind of DPI-based filtering. You can confirm it's DPI and not something else by testing from a different network like your phone's hotspot.