Routing transmission daemon through tun0
Posted: Mon Mar 17, 2014 7:40 pm
Hi, I've been trying to get this to work for way too long. I set up openvpn on a openvz server, and I'm trying to connect to it with a ubuntu server and have ONLY transmission-daemon use tun0. I tried to configure the iptables on the openvpn server to forward all outgoing traffic from the clients and allow incoming traffic on certian ports, but I'm not sure if I did it correctly. As a note things in all caps are just referring to what is actually entered.
After installing and configuring the server and client I set up a group called vpnroute, then used iptables to only allow vpnroute to use tun0, then I bound transmission to 10.8.0.6 and ran it with:
however it complains with :
Additionally here are various relevant configuration details:
OpenVPN server.conf:
OpenVPN client.conf:
Server IPtables:
Client IPtables:
Transmission configuration:
If I try to connect to the remote interface on port 9091 it just times out.
If anybody could help with this you would be my hero
After installing and configuring the server and client I set up a group called vpnroute, then used iptables to only allow vpnroute to use tun0, then I bound transmission to 10.8.0.6 and ran it with:
Code: Select all
sudo -g vpnroute transmission-daemon -f -t -u USERNAME -v PASSWORD -w DOWNLOADPATH -g /etc/transmission-daemon/ -i 10.8.0.6 -r 10.8.0.6Code: Select all
13:32:41.881] Transmission 2.82 (14160) started (session.c:738)
[13:32:41.882] RPC Server Adding address to whitelist: 127.0.0.1 (rpc-server.c:828)
[13:32:41.882] RPC Server Serving RPC and Web requests on port 127.0.0.1:9091/transmission/ (rpc-server.c:1035)
[13:32:41.882] RPC Server Password required (rpc-server.c:1042)
[13:32:41.882] Port Forwarding Stopped (port-forwarding.c:183)
[13:32:41.882] UDP Failed to set receive buffer: requested 4194304, got 425984 (tr-udp.c:78)
[13:32:41.882] UDP Please add the line "net.core.rmem_max = 4194304" to /etc/sysctl.conf (tr-udp.c:83)
[13:32:41.882] UDP Failed to set send buffer: requested 1048576, got 425984 (tr-udp.c:89)
[13:32:41.882] UDP Please add the line "net.core.wmem_max = 1048576" to /etc/sysctl.conf (tr-udp.c:94)
OpenVPN server.conf:
Code: Select all
port 1194
proto udp
dev tun0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/osiris.crt
key /etc/openvpn/osiris.key
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway defi by-pass-dhcp"
push "dhcp-option DNS 10.8.0.1"
keepalive 10 120
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
OpenVPN client.conf:
Code: Select all
remote DOMAINNAME 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/rodney.crt
key /etc/openvpn/rodney.key
ns-cert-type server
verb 3
Code: Select all
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- 10.8.0.0/24 anywhere
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@osiris:~# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT udp -- anywhere anywhere multiport dports 9091 to:10.8.0.6
DNAT tcp -- anywhere anywhere multiport dports 9091 to:10.8.0.6
DNAT udp -- anywhere anywhere multiport dports 40001 to:10.8.0.6
DNAT tcp -- anywhere anywhere multiport dports 40001 to:10.8.0.6
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
SNAT all -- 10.8.0.0/24 anywhere to:VENET IP
SNAT all -- anywhere anywhere to:VENET IP
SNAT all -- 10.8.0.0/24 anywhere to:VENET IP
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Code: Select all
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere owner GID match vpnroute reject-with icmp-port-unreachable
REJECT all -- anywhere anywhere owner GID match vpnroute reject-with icmp-port-unreachable
Chain fail2ban-ssh (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Code: Select all
{
"alt-speed-down": 1000,
"alt-speed-enabled": false,
"alt-speed-time-begin": 540,
"alt-speed-time-day": 0,
"alt-speed-time-enabled": false,
"alt-speed-time-end": 0,
"alt-speed-up": 50,
"bind-address-ipv4": "10.8.0.6",
"bind-address-ipv6": "::",
"blocklist-enabled": false,
"blocklist-url": "http://www.example.com/blocklist",
"cache-size-mb": 100,
"dht-enabled": false,
"download-dir": "/mnt/internal/downloads/",
"download-limit": 100,
"download-limit-enabled": 0,
"download-queue-enabled": false,
"download-queue-size": 5,
"encryption": 1,
"idle-seeding-limit": 30,
"idle-seeding-limit-enabled": false,
"incomplete-dir": "/home/rodney/Downloads",
"incomplete-dir-enabled": false,
"lpd-enabled": false,
"max-peers-global": 200,
"message-level": 2,
"peer-congestion-algorithm": "",
"peer-id-ttl-hours": 6,
"peer-limit-global": 1000,
"peer-limit-per-torrent": 100,
"peer-port": 40001,
"peer-port-random-high": 65535,
"peer-port-random-low": 49152,
"peer-port-random-on-start": false,
"peer-socket-tos": "default",
"pex-enabled": false,
"port-forwarding-enabled": false,
"preallocation": 1,
"prefetch-enabled": 1,
"queue-stalled-enabled": true,
"queue-stalled-minutes": 30,
"ratio-limit": 2,
"ratio-limit-enabled": false,
"rename-partial-files": true,
"rpc-authentication-required": true,
"rpc-bind-address": "10.8.0.6",
"rpc-enabled": true,
"rpc-password": "PASSWORD",
"rpc-port": 9091,
"rpc-url": "/transmission/",
"rpc-username": "USERNAME",
"rpc-whitelist": "127.0.0.1",
"rpc-whitelist-enabled": false,
"scrape-paused-torrents-enabled": true,
"script-torrent-done-enabled": false,
"script-torrent-done-filename": "",
"seed-queue-enabled": false,
"seed-queue-size": 10,
"speed-limit-down": 25000,
"speed-limit-down-enabled": false,
"speed-limit-up": 25555,
"speed-limit-up-enabled": false,
"start-added-torrents": true,
"trash-original-torrent-files": false,
"umask": 18,
"upload-limit": 100,
"upload-limit-enabled": 0,
"upload-slots-per-torrent": 14,
"utp-enabled": true
}
If I try to connect to the remote interface on port 9091 it just times out.
If anybody could help with this you would be my hero