Hi, n00b here 🙂
We are some friends that have a vps for learning and testing.
We have an openvpn server installed:
dev tap
proto udp
port 1194
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/servidor.crt
key /etc/openvpn/keys/servidor.key
dh /etc/openvpn/keys/dh2048.pem
user nobody
group nogroup
server 10.6.0.0 255.255.255.0
persist-key
persist-tun
push "redirect-gateway"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
duplicate-cn
cipher BF-CBC
keepalive 10 120
verb 0
comp-lzo
max-clients 10
We surf the internet without problems.
The question is that we have no nat or iptables modification, but we can surf with the ip server (
http://www.whatsmyip.org and irc server show our server ip not our real ips). Only on a small irc server at the vps we use to chat, if we connect to it public address we connect with our real ips so we have to connect to 10.6.0.1 so we cannot see real ip of users.
Is there any other problem about not using
server-bridge 10.6.0.2 255.255.255.0 10.6.0.50 10.6.0.100
(dunno if this line is ok) mode instead of only
server 10.6.0.0 255.255.255.0
like we are using now, for surfing the internet all of us connecting to our vps server?
I know the right way is server-bridge and iptables but if it works fine without it where is the problem? and why do we have to use server-bridge?
Thanks for your time.
