hi everyone, i have 6 ip addresses allocated to my server. I use my server as an openvpn secure connection from all my laptops and home pc. Currently i have the following line in my rc.local which sets up with traffic going out everytime i reboot my server: [code]iptables -t nat -A POSTROUTING -j SNAT --to-source 83.***.***.213[/code] That is my main server ip address. I would like to have my outgoing openvpn connection on a different ip, is it possible? I have tried changing the code, to one of my other ip addresses, such as: [code]iptables -t nat -A POSTROUTING -j SNAT --to-source 83.***.***.214[/code] ...but the problem is i have trouble with my cpanel licences etc messing up. What i would like to know is it possible to change the command above, to just affect the openvpn traffic and nothing else? or is there something i can add into my openvpn.conf instead to change the outgoing ip? i already have changed the incoming listening ip by using: [code]local 83.***.***.211[/code] thanks for any help you can give me :)

[quote="jamesfawcett"]is it possible to change the command above, to just affect the openvpn traffic and nothing else?[/quote] Something like: [code]iptables -t nat -A POSTROUTING -s 10.8.1.0/24 -j SNAT --to-source 83.***.***.214[/code] This should solve that part of the problem for you. Replace 10.8.1.0 with whatever subnet your VPN as assigning. More info here: https://forums.openvpn.net/topic8559.html

[quote="Bebop"] Something like: [code]iptables -t nat -A POSTROUTING -s 10.8.1.0/24 -j SNAT --to-source 83.***.***.214[/code] [/quote] this worked! all sorted :) thanks james

How to change only the openvpn ip for outgoing traffic

jamesfawcett

hi everyone,

i have 6 ip addresses allocated to my server.
I use my server as an openvpn secure connection from all my laptops and home pc.

Currently i have the following line in my rc.local which sets up with traffic going out everytime i reboot my server:

iptables -t nat -A POSTROUTING -j SNAT --to-source 83.***.***.213

That is my main server ip address. I would like to have my outgoing openvpn connection on a different ip, is it possible?
I have tried changing the code, to one of my other ip addresses, such as:

iptables -t nat -A POSTROUTING -j SNAT --to-source 83.***.***.214

...but the problem is i have trouble with my cpanel licences etc messing up.
What i would like to know is it possible to change the command above, to just affect the openvpn traffic and nothing else?
or is there something i can add into my openvpn.conf instead to change the outgoing ip? i already have changed the incoming listening ip by using:

local 83.***.***.211

thanks for any help you can give me 🙂

jamesfawcett

sorry to post again, i have just been playing arround with my old setup on the server which involves stunnel and squid.

In squid i can change the outgoing ip address for the traffic with the code:

tcp_outgoing_address 83.***.***.121 ip1

if you put more than one tcp_outgoing_address, squid alternates between each ip address at every connect.
Is there no command like this in openvpn?

I also wondered if there is an openvpn equivilant of:

httpd_suppress_version_string on

which is used to hide http headers (i think)

is there anything like this in openvpn?

if not, would it be a bad idea if i route openvpn through squid?
is that a silly idea? that would let me choose my outgoing ip address etc

thanks 8-)

Bebop

jamesfawcett wroteis it possible to change the command above, to just affect the openvpn traffic and nothing else?

Something like:

iptables -t nat -A POSTROUTING -s 10.8.1.0/24 -j SNAT --to-source 83.***.***.214

This should solve that part of the problem for you. Replace 10.8.1.0 with whatever subnet your VPN as assigning.

More info here: https://forums.openvpn.net/topic8559.html

jamesfawcett

excellent!! that is the main thing i needed, thank you!

i will give this a try now, thanks again 🙂 🙂 😃

jamesfawcett

Bebop wrote Something like:

iptables -t nat -A POSTROUTING -s 10.8.1.0/24 -j SNAT --to-source 83.***.***.214

this worked!

all sorted 🙂

thanks
james