OpenVPN SSH Tunnel

[zakazak]

Hi, so after 4 hours I finally managed to install OpenVPN on my deiban 6 server.
I can connect to it via the OpenVPN GUI in Windows 7.. but then I won't be able to use the internet anymore (no internet access after connecting to the VPN).

Okay not a big deal.. actually I wanted to use the VPN only for mail & browser... so I tried installing the SSH tunnel like this:

http://www.classy.dk/hacks/archives/002287.html

The command I used for starting the tunnel:
ssh -L1194:127.0.0.1:1194 root@my-server-ip/domain


When I now enter the server ip + port as proxy in my browser, most sites won't work. E.g. I can use google but as soon as I open a link it is just a blank site.

Thanks

[Mimiko]

The internet is redirected thru the tunnel by ' push "redirect-gateway def1" ' from OpenVPN server. There is no need for some SSH tunnel. Ever disable redirecting gateway, or configure server to forward packets.

[zakazak]

Without the SSH Tunnel I can't use the OpenVPN connection just for firefox? I thought I would use it like a proxy? I don't want to transfer ALL my traffic through the VPN. Just browser/mail/messenger.

Thanks

[Mimiko]

Oh, its a diferent matter, not related to OpenVPN. You must figure out how to route trafic for sertain application thru specified interface. Interface may be tun adapter or phisical adapter.

[zakazak]

I'm on Win7 Prof.. as far as I know I can't tell applications to use only certain adapters That's why most tutorials recommend using the OpenVPN as some kind of socks4/5 proxy.

[Mimiko]

You are mistken. OpenVPN is not a kind of socks proxy. OpenVPN is tunneling software to bind toghether remote computers and sites. So in your Win 7 to route traffic from certain application to different interfaces, you need to google for a 3rd software which does this.

[zakazak]

Thats pretty much what I did.. and google told me SSH Tunnel via OpenVPN (to use it as socks in firefox/ie/thundebrird)

[Mimiko]

May be it means the other:
1) Setting OpenVPN with remote server (like you did).
2) Setting on remote server a proxy.
3) Setting the browser to use that proxy thru the tunnel.

[zakazak]

So I would use a proxy which gets encrypted by OpenVPN ? Well that is fine for me too as long as someone tells me how to do that ;D

I simply want to prevent sniffing my browser/mail passwords.

[Mimiko]

So I would use a proxy which gets encrypted by OpenVPN ?

Yes, comunnication with proxy will be encripted. After proxy will be as always.

[zakazak]

Ye well the communication from the OpenVPN-Server to the website would always be normal?

Do you maybe have a link for me with a guide on how to set up OpenVPN like that? I'm really new to linux/servers :S

Thanks

[Mimiko]

You've already set up a tunnel. Just install on OpenVPN server a proxy and use it.