August 20, 201312 yr yeah, its says- ERROR Failed to connect to mail server Well that explains it. I take it everything else that connects to the Internet works except for the email when the VPN tunnel is established? In the SAB config, are your servers for usenet/torrent, etc. configured with names or IP address numbers? I also assume when you disconnect from the VPN the email works again? Try telnet into your server and do a ping lime-technology.com -c 2 and ping 216.119.154.106 -c 2 and let me know if they both work or not when the VPN is connected and disconnected. Another reason could be your VPN provider is blocking SMTP. Might want to check with your VPN provider if the above checks work fine or route traffic for the email server outside of your VPN. The problem with gmail is they use multiple servers in a round-robin DNS resolution. You would need to isolate one by IP and exclude it from the VPN.
August 20, 201312 yr Turns out my vpn provider blocks all emails from being sent in an effort to avoid spam. Looks like I need to try and route my email outside of the vpn. On a completely separate note, today when i got home i went to run the ping commands. I then noticed that i was not connected to my vpn. When i opened the UI of the app it said that it was still running and that i was connected. I am not sure what happened but my vpn must have disconnected at some point during the day. If i wouldn't have tried running the pings i would have never know that i wasn't connected to my VPN. Because according to the UI of the app it showed it was still running.
August 21, 201312 yr Turns out my vpn provider blocks all emails from being sent in an effort to avoid spam. Looks like I need to try and route my email outside of the vpn. On a completely separate note, today when i got home i went to run the ping commands. I then noticed that i was not connected to my vpn. When i opened the UI of the app it said that it was still running and that i was connected. I am not sure what happened but my vpn must have disconnected at some point during the day. If i wouldn't have tried running the pings i would have never know that i wasn't connected to my VPN. Because according to the UI of the app it showed it was still running. Yeah that was the problem I had with plugin before I took it upon myself to make some changes to it so it would work properly. Peter_sm is still reviewing the changes and not sure what he will keep/toss. There are some openvpn command options you can add manually to the plugin or to the ovpn file to make it restart on its own if it disconnects/ping timeouts. I can get it to stay connected, but I need to look into iptables to place a psuedo firewall up for traffic from the VPN since I had telnet port probes in my logs when the VPN was connected overnight. The options I added were 'ping-restart 90', 'ping-timer-rem', 'persist-tun', and 'persist-key'. Also changed the user/group to nobody, though not related to keeping the VPN up.
August 21, 201312 yr Thank you, I will give that a try. Why do you think you had the telnet port probing while only connected to the vpn?
August 21, 201312 yr My syslog showed several connection attempts via telnet from IPs from Taiwan, Vietnam, etc. while the VPN was active. The VPN log did show three reconnects overnight (keys expiring), but they occurred at times hours apart from the telnet probes. I have an email in to my VPN provider to see what they can figure out on their end. Not an easy feeling to give up the security of my firewall/router and open my server up to attacks from a VPN service.
August 21, 201312 yr Author New version with a Drop Down list for ALL of your differents ovpn files //Peter
August 27, 201312 yr I am not sure why but i think after the last couple of updates i no longer have access to the internet while this is enabled. If i try to ping a site it tells me unknown host (google.com) when i diable the plugin it has no problem. I am also experiencing some severe hanging when i have this enabled. I click start, then it just loads and load and loads. The page then goes all white, it loads for about 20 min then it says its started.
August 27, 201312 yr Author That because it takes time to respond to get your IP back from the page I checking on, I have tried a few of difference sites, but what you can do is to edit the plugin and pick another one, there are a few in the plugin. look at line 99 -> wget -q -O - checkip.dyndns.org | sed -e 's/[^[:digit:]\|.]//g' You can remark this one and remove the mark from an another line, maybe some day is one OK another day is it slow ...... or add mark on all line and check your IP on the network interface text box for tun5 or tap5, that might be better, then we don't get this time delay ... //Peter
August 27, 201312 yr Thank you, I will give that a try this evening when I get home. How about the other issue I am experiencing, it seems that after updating the plugin (I think it was three times ago) I am not able to connect to anything, like sickbeard and couchpotato are kicking back errors saying they can not find the web address of my indexer, also if I telnet in to the server then try to ping and address is comes back unknown host (google.com). If I disable the plugin everything works fine. Again this only started happening a few days ago after one of the updates. Prior to that everything was working just fine. Was there something in one of the last few updates that changed and would have caused this to happen?
August 27, 201312 yr Author New version, I'm not longer using openvpn.pid for check if running or not, and not use this file to kill the process. //Peter
August 30, 201312 yr It's not starting for me at boot time from the zip on the OP, I started from scratch and removed all folder related to the plugin. Then I went to update plg via the gui and I get the following error: Options error: Unrecognized option or missing parameter(s) in [CMD-LINE]:1: config (2.3.2) Use --help for more information. Plugin / Build Local Version Online Version OpenVPN Plugin Version 2.7.19 2.7.19 OpenVPN Software Build OpenVPN 2.3.2 2.3.2 EDIT: nevermind I seem to have worked it out
August 30, 201312 yr Author If anyone is interested, I have compiled final V5 with iptables, see post #1
August 31, 201312 yr This did not work with privatetunnel.com. I have it working with IPVanish VPN. However, my SABNZBD download speed is total crap (54 kb/sec vs 2 MB/sec without VPN). This is connecting to a server in my own city. WTH...
September 2, 201312 yr This might be a dumb question, but I'm really trying to understand the use of OpenVPN as a client on unRAID. If I enable this plugin with my VPN provider, does ALL traffic go over the VPN? I would assume local network traffic from http://tower:8080 or other file transfer traffic would somehow bypass the VPN? Just trying to understand before I test out my VPN provider with unRAID.
September 2, 201312 yr Author You might try to use "extended" function. but I have not use it so i can't' tell. see more in post #1 //Peter
September 2, 201312 yr This might be a dumb question, but I'm really trying to understand the use of OpenVPN as a client on unRAID. If I enable this plugin with my VPN provider, does ALL traffic go over the VPN? I would assume local network traffic from http://tower:8080 or other file transfer traffic would somehow bypass the VPN? Just trying to understand before I test out my VPN provider with unRAID. Once you have this running on your server, all traffic that is sent outbound from the server, such as sickbeard, couchpotato, headphones, sabnzbd will be running through the vpn tunnel. if this is not what you want you have a couple of options. Peter has them listed on the first post. Here they are To be able to use "Route specific IP through VPN tunnel" you first need to create this file webbadress.txt in /boot/openvpn, preferred is to use a linux friendly editor (notepad2 or ultra edit to create this file or VI in command prompt To be able to use "Bypass specific IP from VPN tunnel" you first need to create this file bypassed.txt in /boot/openvpn, preferred is to use a linux friendly editor (notepad2 or ultra edit to create this file or VI in command prompt, It shall be same format as webbadress.txt example of a webbadress.txt Code: [select] www.aftonbladet.se www.di.se lime-technology.com www.expressen.se
September 2, 201312 yr This might be a dumb question, but I'm really trying to understand the use of OpenVPN as a client on unRAID. If I enable this plugin with my VPN provider, does ALL traffic go over the VPN? I would assume local network traffic from http://tower:8080 or other file transfer traffic would somehow bypass the VPN? Just trying to understand before I test out my VPN provider with unRAID. Once you have this running on your server, all traffic that is sent outbound from the server, such as sickbeard, couchpotato, headphones, sabnzbd will be running through the vpn tunnel. if this is not what you want you have a couple of options. Peter has them listed on the first post. Here they are To be able to use "Route specific IP through VPN tunnel" you first need to create this file webbadress.txt in /boot/openvpn, preferred is to use a linux friendly editor (notepad2 or ultra edit to create this file or VI in command prompt To be able to use "Bypass specific IP from VPN tunnel" you first need to create this file bypassed.txt in /boot/openvpn, preferred is to use a linux friendly editor (notepad2 or ultra edit to create this file or VI in command prompt, It shall be same format as webbadress.txt example of a webbadress.txt Code: [select] www.aftonbladet.se www.di.se lime-technology.com www.expressen.se So, do you "whitelist" your local network using bypass.txt? I guess I don't really understand how those two texts file are being used by people. Does anyone have examples of how they would be used with sickbeard, headphones, etc?
September 2, 201312 yr I dont use them at all. I just let all my traffic run through the vpn tunnel. I have the openvpn plugin running on my server thus making anything that's running from my server go through the vpn tunnel. The only time you would need those lists are if you didn't want something to go through the tunnel or if you only wanted certain things things to go through the tunnel.
September 2, 201312 yr Here is a post from earlier in the thread that might help you. Lets think about a scenario where a user would only want to tunnel two addresses through a tunnel. Everything else would go through the normal internet connection. Lets take an example where we only want to tunnel xbmc.org and lime-technology.com through the vpn. We would use your addon to connect to the vpn and we can see that our ip address changed. That is because our normal ip route is through the tunnel and in this scenario we don't want that. ip route delete "0.0.0.0/1" ip route delete "128.0.0.0/1" Now the ip address has changed back to the normal ISP ip address and nothing goes through the vpn. Now we need to find out the ip addresses of xbmc and lime-technology and we can just use ping: ping xbmc.org PING xbmc.org (205.251.128.242) 56(84) bytes of data. ping lime-technology.com PING lime-technology.com (216.119.154.106) Now that we have the ip addresses we can add them to the whitelist: (I like to replace the last part of the ip address with .0/24 to make sure i get all of the sites ip range) # Destination VPN tunnel (check address at the right bottom of "ip route show") ip route add 205.251.128.0/24 via 10.200.4.1 dev tun0 ip route add 216.119.154.0/24 via 10.200.4.1 dev tun0 Now you can test using tracepath xbmc.org tracepath google.com You can see that xbmc.org goes through the vpn but google goes through the router and ISP. These changes need to be typed in again if you disconnect/reconnect
September 2, 201312 yr I guess I'm thick skulled today. If I use it for all traffic, does it also affect traffic on the local network? I'm guessing not, or it would make your fileserver pretty slow. I'll just give it a try with ALL traffic going through the VPN and see how it works for me. Thanks again! I read through that post, but why would you just route one domain through your vpn? Especially if you are using a P2P client like transmission where there is a unknown amount of possibilities. I'm guessing most people just do what you said and put all the traffic through vpn.
Archived
This topic is now archived and is closed to further replies.