Configure Firefox to use OpenVPN.

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
zabidin2
OpenVpn Newbie
Posts: 3
Joined: Wed May 11, 2011 3:19 am

Configure Firefox to use OpenVPN.

Post by zabidin2 » Mon May 16, 2011 2:17 am

Hi,

I have setup openvpn server on ubuntu 10.04. This is conf for server.conf:

Code: Select all

root@web01:~# cat /etc/openvpn/server.conf
;local 184.22.103.184
mode server
port 443
;proto tcp
proto udp
tls-server
;dev tap
dev tun0
;dev-node MyTap
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway 10.8.0.1"
;;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0
;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES
comp-lzo
max-clients 10
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
;log-append  openvpn.log
verb 3
;mute 20
root@web01:~#
This is from client.ovpn

Code: Select all

client
dev tun
proto udp
tls-client
#Change my.publicdomain.com to your public domain or IP address
remote 184.22.103.184 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3  
So, how to configure firefox? Use sock? And why i client show no default gateway when i connect from windows 7? Please assist me.

Thanks.

Douglas
Forum Team
Posts: 285
Joined: Wed Aug 27, 2008 2:41 am

Re: Configure Firefox to use OpenVPN.

Post by Douglas » Mon May 16, 2011 2:55 am

zabidin2 wrote:Hi,

I have setup openvpn server on ubuntu 10.04. This is conf for server.conf:

Code: Select all

root@web01:~# cat /etc/openvpn/server.conf
;local 184.22.103.184
mode server
port 443
;proto tcp
proto udp
tls-server
;dev tap
dev tun0
;dev-node MyTap
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway 10.8.0.1"
;;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0
;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES
comp-lzo
max-clients 10
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
;log-append  openvpn.log
verb 3
;mute 20
root@web01:~#
This is from client.ovpn

Code: Select all

client
dev tun
proto udp
tls-client
#Change my.publicdomain.com to your public domain or IP address
remote 184.22.103.184 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3  
So, how to configure firefox? Use sock? And why i client show no default gateway when i connect from windows 7? Please assist me.

Thanks.
If you need to use it for *just* firefox, openvpn isn't for you, unless you want to use a ssh tunnel over the VPN.

If you want to redirect *all* traffic, look into the redirect-gateway setting.

zabidin2
OpenVpn Newbie
Posts: 3
Joined: Wed May 11, 2011 3:19 am

Re: Configure Firefox to use OpenVPN.

Post by zabidin2 » Mon May 16, 2011 6:09 am

I try to redirect all traffic to use openvpn. But when my client windows show default gateway does not have ip, user cannot surf.

I setup this vpn on ubuntu 10.10 that run in VPS using OpenVZ. Is there any problem run on VM? On physical server i manage to setup.

Code: Select all

root@web01:~# ifconfig
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:435 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:26764 (26.7 KB)  TX bytes:0 (0.0 B)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:58130 errors:0 dropped:0 overruns:0 frame:0
          TX packets:62047 errors:0 dropped:578 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:6739825 (6.7 MB)  TX bytes:10266576 (10.2 MB)

venet0:0  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:184.22.xxx.xxx  P-t-P:184.22.xxx.xxx  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1

venet0:1  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:184.22.xxx.xxx  P-t-P:184.22.xxx.xxx  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1

root@web01:~#

Post Reply