peter_sm

Create a folder /boot/openvpn and then copy your files to that folder. Start the plugin.

After I installed osx with Cham According to the guide. Then I installed clover to OS X disk then removed Cham from XML file. It looks like this. [emoji3] <os> <type arch='x86_64' machine='pc-q35-2.5'>hvm</type> <boot dev='hd'/> <bootmenu enable='yes'/> </os> <features> <acpi/> </features> <cpu mode='custom' match='exact'> <model fallback='allow'>core2duo</model> </cpu> <clock offset='utc'/> <on_poweroff>destroy</on_poweroff> <on_reboot>restart</on_reboot> <on_crash>destroy</on_crash> <devices> <emulator>/usr/local/sbin/qemu</emulator> <disk type='block' device='disk'> <driver name='qemu' type='raw' cache='none' io='native'/> <source dev='/dev/vg_virtual_machines/lv_ElCapitan'/>

@gridrunner, Did you even try to have clover on is own image and boot from that? I have neither seabios, ovmf or Chameleon in my OSX xml file. booting directly to clover that are installed on my OSX image file. //Peter

This is great , need to try this. Good complement to Archi and My work to get OSX run under KVM. Skickat från min iPhone med Tapatalk

Yup, that's the spot. Peter_SM has a very similar setup to me and is getting the same problem. So ya, definitely sounds like it's something with our reverse proxy / nginx setup. Final I get a solution ! :-) In your server settings try to add this line add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; example ... server { listen 443 ssl; server_name www.example.com; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; }

The plugin looking for your WAN IP. If yo don't have any internet it will be stuck while perform this command. //Peter

Try the plugin and use default values, create some clients and you are ready to go [emoji41] info will be on the first settings page after installed the plugin.

Only one line at the time :-) Can you easily verify IF ALL traffic are going trough the VPN server ?

I'm using NextCloud and letsencrypt for reverse proxy. I see this in NextCloud. Is there any solution to fix this ? Security & setup warnings The "X-XSS-Protection" HTTP header is not configured to equal to "1; mode=block". This is a potential security or privacy risk and we recommend adjusting this setting. The "X-Content-Type-Options" HTTP header is not configured to equal to "nosniff". This is a potential security or privacy risk and we recommend adjusting this setting. The "X-Robots-Tag" HTTP header is not configured to equal to "none". This is a potential security or privacy risk and we recommend adjusting this setting. The "X-Frame-Options" HTTP header is not configured to equal to "SAMEORIGIN". This is a potential security or privacy risk and we recommend adjusting this setting.

These settings are in my plugin and shall rout all client traffic (including web-traffic) through the VPN push "redirect-gateway def1" And iptables rule iptables -t nat -A POSTROUTING -s <VPN server IP>/24 -o eth0 -j MASQUERADE One thing I'm not sure about is DNS settings, need to get this verify. one of these should be fine, or all variants is OK? push "dhcp-option DNS <VPN server IP>" push "dhcp-option DNS <UNRAID IP>" push "dhcp-option DNS <ROUTER IP>" push "dhcp-option DNS <GOOGLE>" We can try this as well on client-side redirect-gateway def1

I have tested different settings and verified with my Mobile over 3G This setting didn't change my Mobile IP Redirect-gateway = No Push LAN subnet to the clients = No This settings give my mobile samer IP as my WAN Redirect-gateway = redirect-gateway def1 Push LAN subnet to the clients = Yes

Hi , are you talking about routing all client traffic through OpenVPN server ? //Peter

Hi, Using the server want change your WAN IP. //Peter

Do you have symmetric 100Mbps at your home? Most US internet connections are asymmetric, and offer much lower transmit than receive speeds. Try running a speed benchmark (speedtest.net) behind your home router to check what speed you are actually able to transmit. I am having a really similar issue, if we can solve it, a beer is all yours. Any help or ideas would be appreciated... Do you think this applies?? http://winaero.com/blog/speed-up-openvpn-and-get-faster-speed-over-its-channel/ Thanks again. Try also modify only the server ovpn file with this lines. sndbuf 0 rcvbuf 0 push "sndbuf 393216" push "rcvbuf 393216"

Do you have symmetric 100Mbps at your home? Most US internet connections are asymmetric, and offer much lower transmit than receive speeds. Try running a speed benchmark (speedtest.net) behind your home router to check what speed you are actually able to transmit. I am having a really similar issue, if we can solve it, a beer is all yours. Any help or ideas would be appreciated... Do you think this applies?? http://winaero.com/blog/speed-up-openvpn-and-get-faster-speed-over-its-channel/ Thanks again. Can you manually add this to server ovpn file and to the client file and test? //Peter

Don't know. you can try to disable encryption and se if that give you anything, just for testing, you need to create new client file.

Are you using default settings for the server configuration? or did you change anything ? The complete LAN shall be accessible trough VPN conenction. //Peter

If you create a folder named extra on the flash, will be /boot/extra then copy the 2 SSL packages to that folder and then reboot. File on that folder will be automatic installed during boot. Skickat från min iPhone med Tapatalk

Are you on 6.1 version of unRAID ? if so the plugin will not work, you need to update your SSL packages. There is info from me with DL links some pages back. //Peter

do you se any logs when client try to connect on the server? And the are client using a "in-line file" ?

Can you post openvpnserver.ovpn ? What kind of client are you using? On http://www.yougetsignal.com/tools/open-ports/ my port show closed, but it works.

Hi, Did you create the folder on the flash named openvpn ? Skickat från min iPhone med Tapatalk

Hi, Ok I understand, right now can you add this to your go file ? /usr/local/emhttp/plugins/openvpnserver/scripts/rc.openvpnserver start and set Start OpenVPN server during array mount to No This shall enable the server to start before array shall startif you change installation to /boot. But there is a way to start it before array is online, but this requires users to install only on the /boot or other disk that is mounted before the array is online. //Peter

So how about if we copy the server files to the flash config folder as well? I mean, some server owners might have difficulties (owing to their drives being smaller than 512MB or so) but then we can just provide a switch for those that have bigger USB flash drives (4GB or more). This way, the OVPN server starts at the same time as boot-up, not when the array is started. This way, we can start the array from the outside world and diagnose and troubleshoot server-side issues. Just my two bucks worth but hey, it's a good idea, right? Hi, It's up to you if you like to configure the OpenVPN settings path to /boot/* //Peter

Thanks for the quick update! And what about the reboot-restart scenario I showed on the top? Will that get added in a future release as well? Sorry if I sound pushy, but thanks for all your effort. OpenVPN server can start when array is coming online, it can also be set so it still be running when array stops! BUT of course the mount point where server files(ovpn, all certs) belong will be unmounted. I have not tested this by myself if it still can be running from memory when array stops. //Peter