After installing and configuring the server and client I set up a group called vpnroute, then used iptables to only allow vpnroute to use tun0, then I bound transmission to 10.8.0.6 and ran it with:
Code: Select all
sudo -g vpnroute transmission-daemon -f -t -u USERNAME -v PASSWORD -w DOWNLOADPATH -g /etc/transmission-daemon/ -i 10.8.0.6 -r 10.8.0.6Code: Select all
13:32:41.881] Transmission 2.82 (14160) started (session.c:738)
[13:32:41.882] RPC Server Adding address to whitelist: 127.0.0.1 (rpc-server.c:828)
[13:32:41.882] RPC Server Serving RPC and Web requests on port 127.0.0.1:9091/transmission/ (rpc-server.c:1035)
[13:32:41.882] RPC Server Password required (rpc-server.c:1042)
[13:32:41.882] Port Forwarding Stopped (port-forwarding.c:183)
[13:32:41.882] UDP Failed to set receive buffer: requested 4194304, got 425984 (tr-udp.c:78)
[13:32:41.882] UDP Please add the line "net.core.rmem_max = 4194304" to /etc/sysctl.conf (tr-udp.c:83)
[13:32:41.882] UDP Failed to set send buffer: requested 1048576, got 425984 (tr-udp.c:89)
[13:32:41.882] UDP Please add the line "net.core.wmem_max = 1048576" to /etc/sysctl.conf (tr-udp.c:94)
OpenVPN server.conf:
Code: Select all
port 1194
proto udp
dev tun0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/osiris.crt
key /etc/openvpn/osiris.key
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway defi by-pass-dhcp"
push "dhcp-option DNS 10.8.0.1"
keepalive 10 120
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
OpenVPN client.conf:
Code: Select all
remote DOMAINNAME 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/rodney.crt
key /etc/openvpn/rodney.key
ns-cert-type server
verb 3
Code: Select all
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- 10.8.0.0/24 anywhere
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@osiris:~# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT udp -- anywhere anywhere multiport dports 9091 to:10.8.0.6
DNAT tcp -- anywhere anywhere multiport dports 9091 to:10.8.0.6
DNAT udp -- anywhere anywhere multiport dports 40001 to:10.8.0.6
DNAT tcp -- anywhere anywhere multiport dports 40001 to:10.8.0.6
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
SNAT all -- 10.8.0.0/24 anywhere to:VENET IP
SNAT all -- anywhere anywhere to:VENET IP
SNAT all -- 10.8.0.0/24 anywhere to:VENET IP
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Code: Select all
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere owner GID match vpnroute reject-with icmp-port-unreachable
REJECT all -- anywhere anywhere owner GID match vpnroute reject-with icmp-port-unreachable
Chain fail2ban-ssh (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Code: Select all
{
"alt-speed-down": 1000,
"alt-speed-enabled": false,
"alt-speed-time-begin": 540,
"alt-speed-time-day": 0,
"alt-speed-time-enabled": false,
"alt-speed-time-end": 0,
"alt-speed-up": 50,
"bind-address-ipv4": "10.8.0.6",
"bind-address-ipv6": "::",
"blocklist-enabled": false,
"blocklist-url": "http://www.example.com/blocklist",
"cache-size-mb": 100,
"dht-enabled": false,
"download-dir": "/mnt/internal/downloads/",
"download-limit": 100,
"download-limit-enabled": 0,
"download-queue-enabled": false,
"download-queue-size": 5,
"encryption": 1,
"idle-seeding-limit": 30,
"idle-seeding-limit-enabled": false,
"incomplete-dir": "/home/rodney/Downloads",
"incomplete-dir-enabled": false,
"lpd-enabled": false,
"max-peers-global": 200,
"message-level": 2,
"peer-congestion-algorithm": "",
"peer-id-ttl-hours": 6,
"peer-limit-global": 1000,
"peer-limit-per-torrent": 100,
"peer-port": 40001,
"peer-port-random-high": 65535,
"peer-port-random-low": 49152,
"peer-port-random-on-start": false,
"peer-socket-tos": "default",
"pex-enabled": false,
"port-forwarding-enabled": false,
"preallocation": 1,
"prefetch-enabled": 1,
"queue-stalled-enabled": true,
"queue-stalled-minutes": 30,
"ratio-limit": 2,
"ratio-limit-enabled": false,
"rename-partial-files": true,
"rpc-authentication-required": true,
"rpc-bind-address": "10.8.0.6",
"rpc-enabled": true,
"rpc-password": "PASSWORD",
"rpc-port": 9091,
"rpc-url": "/transmission/",
"rpc-username": "USERNAME",
"rpc-whitelist": "127.0.0.1",
"rpc-whitelist-enabled": false,
"scrape-paused-torrents-enabled": true,
"script-torrent-done-enabled": false,
"script-torrent-done-filename": "",
"seed-queue-enabled": false,
"seed-queue-size": 10,
"speed-limit-down": 25000,
"speed-limit-down-enabled": false,
"speed-limit-up": 25555,
"speed-limit-up-enabled": false,
"start-added-torrents": true,
"trash-original-torrent-files": false,
"umask": 18,
"upload-limit": 100,
"upload-limit-enabled": 0,
"upload-slots-per-torrent": 14,
"utp-enabled": true
}
If I try to connect to the remote interface on port 9091 it just times out.
If anybody could help with this you would be my hero