September 15, 201213 yr New BETA plg with OpenVPN 2.3_beta1 //Peter I will start using this version tonight! Also you may want to adjust the first page to reflect my changes in using crontab i listed a few post up. Thanks Again Peter for your work on this plugin!
September 15, 201213 yr EDIT: I tried another VPN Provider (IPVanish) and everything is working as expected. I found a security setting I didn't like in the original provider, so I guess this kills 2 birds. Cheers, and thanks for the rad plugin! Matt Just wondering what security setting you didn't like with Private Internet Access? Because I was thinking of going with them! Thanks
September 20, 201213 yr This worked like a champ. Thanks for all of the work. I have been watching your threads and am happy to see everything work. Only problem i had was initially finding the .ovpn for giganews. Great work and thanks again.
September 23, 201213 yr Peter, I got your plugin all installed, but you said there should be two files .ovpn and .crt. My provider (Witopia) provides a .crt, but the other file is a .key all in a zip file: below is what they sent: ZIP file contents ================= This ZIP file contains your public and private credentials, as well as other information you may or may not need. The files are as follows: CN#######.crt - your public certficate CN#######.key - your private key ca.crt - Root CA certificate ta.key - additional shared-secret key required for some configurations SampleConfig.txt - example OpenVPN configuration file for this VPN ##################################### # Configuration file for use with # # WiTopia's personalVPN service # ##################################### client dev tun proto udp remote [REPLACE WITH SERVER NAME] 1194 resolv-retry infinite nobind persist-key persist-tun ns-cert-type server cipher bf-cbc comp-lzo verb 3 mute 20 ca ca.crt mssfix 1300 key ShangHangin.key cert ShangHangin.crt #tls-auth ta.key 1 Any idea how to make this all work, or recommendation on a stand alone VPN client. Trying to get my unRaid to cross the China Firewall - and look like it is in the USA - many of the plugin code sites puke because of the China IP address including dropbox.com Thanks, as I am a complete noob at this stuff. SH
September 23, 201213 yr Author you can try to rename your Configuration to extension .ovpn, that should work since that is a "ovpn" file //Peter
September 23, 201213 yr Peter, Thank you - works perfectly! I appreciate all the effort and the ease that you and this great community make working with unRaid. SH
October 9, 201213 yr Hello I have installed the plugin and everything appears to be working but am not 100% positive. Before starting it displays my current IP, after it states service is running but it does not display ip address. Any ideas why this is happening and what I can do to ensure that my ip has changed?
October 9, 201213 yr Author Hello I have installed the plugin and everything appears to be working but am not 100% positive. Before starting it displays my current IP, after it states service is running but it does not display ip address. Any ideas why this is happening and what I can do to ensure that my ip has changed? maybe the web site is down where I checking IP adress on, or they have done a new design. //Peter
October 9, 201213 yr Author You can try to edit the plg file and insert below line after line nr 89, and comment out line 89 curl -s http://checkmyip.org/ | grep "Your IP address" //Peter
October 14, 201213 yr I've been looking into running my server through a vpn. If I do so, will I still have local access to the box from my Windows machine so I can access files?
October 17, 201213 yr Is this what you use to connect to a 3rd party VPN? Like VyprVNP, StrongVPN etc.? And all traffic through SABnzbd will be routed through the VPN then? Yes that right I´m looking for a solution that would allow me to route only a selected part of the traffic through VPN not everything. Any ides? Relevant thread: http://lime-technology.com/forum/index.php?topic=23141.0
October 17, 201213 yr I'm interested in something similar. I'd like to only route traffic on certain ports through the vpn and have all other traffic go through the default ISP gateway. Is that possible?
October 18, 201213 yr Author Any one that have tested OpenVPN & hamachi together? For me looks like following steps are necessary. Say that you have hamachi running and logged in all the time... Then...... When starting OpenVPN, below steps looks is necessary Starting OpenVPN 1: hamachi logout 2: /etc/rc.d/rc.openvpn start 3: hamachi login When stopping OpenVPN, below steps looks is necessary Stopping OpenVPN 1: hamachi logout 2: /etc/rc.d/rc.openvpn disable 3: hamachi login If anyone have a better solution, please let me know, perhaps I shall add a option in OpenVPN plugin if hamachi are installed or not, and execute above step if hamachi are installed? What you think? //Peter
October 18, 201213 yr I'm interested in something similar. I'd like to only route traffic on certain ports through the vpn and have all other traffic go through the default ISP gateway. Is that possible? Found a solution: First i have to delete the default route: ip route delete "0.0.0.0/1" ip route delete "128.0.0.0/1" Then I can add the addresses that should go through the vpn tunnel: ip route add <Ip address> via <Ip address of vpn gateway> dev tun0 It would be a really cool feature to add in the vpn plugin. I picture a advanced tap where it would say: "Route only specific ip addresses" and then a textbox where you could type in all the ip addresses
October 20, 201213 yr Author Any one that have tested OpenVPN & hamachi together? For me looks like following steps are necessary. Say that you have hamachi running and logged in all the time... Then...... When starting OpenVPN, below steps looks is necessary Starting OpenVPN 1: hamachi logout 2: /etc/rc.d/rc.openvpn start 3: hamachi login When stopping OpenVPN, below steps looks is necessary Stopping OpenVPN 1: hamachi logout 2: /etc/rc.d/rc.openvpn disable 3: hamachi login If anyone have a better solution, please let me know, perhaps I shall add a option in OpenVPN plugin if hamachi are installed or not, and execute above step if hamachi are installed? What you think? //Peter HI! I have added above command in the plugin for HAMCHI And some fix for icons....... See first post //Peter
October 20, 201213 yr Author I'm interested in something similar. I'd like to only route traffic on certain ports through the vpn and have all other traffic go through the default ISP gateway. Is that possible? Found a solution: First i have to delete the default route: ip route delete "0.0.0.0/1" ip route delete "128.0.0.0/1" Then I can add the addresses that should go through the vpn tunnel: ip route add <Ip address> via <Ip address of vpn gateway> dev tun0 It would be a really cool feature to add in the vpn plugin. I picture a advanced tap where it would say: "Route only specific ip addresses" and then a textbox where you could type in all the ip addresses For me Tower have just one IP and this IP going through the VPN, please let me know more.... ;-) //Peter
October 22, 201213 yr Lets think about a scenario where a user would only want to tunnel two addresses through a tunnel. Everything else would go through the normal internet connection. Lets take an example where we only want to tunnel xbmc.org and lime-technology.com through the vpn. We would use your addon to connect to the vpn and we can see that our ip address changed. That is because our normal ip route is through the tunnel and in this scenario we don't want that. ip route delete "0.0.0.0/1" ip route delete "128.0.0.0/1" Now the ip address has changed back to the normal ISP ip address and nothing goes through the vpn. Now we need to find out the ip addresses of xbmc and lime-technology and we can just use ping: ping xbmc.org PING xbmc.org (205.251.128.242) 56(84) bytes of data. ping lime-technology.com PING lime-technology.com (216.119.154.106) Now that we have the ip addresses we can add them to the whitelist: (I like to replace the last part of the ip address with .0/24 to make sure i get all of the sites ip range) # Destination VPN tunnel (check address at the right bottom of "ip route show") ip route add 205.251.128.0/24 via 10.200.4.1 dev tun0 ip route add 216.119.154.0/24 via 10.200.4.1 dev tun0 Now you can test using tracepath xbmc.org tracepath google.com You can see that xbmc.org goes through the vpn but google goes through the router and ISP. These changes need to be typed in again if you disconnect/reconnect
October 22, 201213 yr Author Thanks for explanation! if you wait some days (week), I now have a bash script that do all this now ( or almost ;-) ), now I need to implement this to the plugin.... It's looks promising ...... //Peter
October 22, 201213 yr Thanks for explanation! if you wait some days (week), I now have a bash script that do all this now ( or almost ;-) ), now I need to implement this to the plugin.... It's looks promising ...... //Peter I would be glad to help test as always!
October 23, 201213 yr Author The first scrip that do this automatic are now finished.... So fare I have a text file with the addresses that shall go via VPN tunnel, and output of the sctipt you see below the line with >>>>>> are just information ........... below that line are the IP that I'm using later... Any comments root@tower:/boot/ipscript# ./new.sh tap0 192.71.238.76 >>>>>>> www.aftonbladet.se 192.71.238.0/24 80.76.155.146 >>>>>>> www.na.se 80.76.155.0/24 80.239.217.170 >>>>>>> www.di.se 80.239.217.0/24 213.132.126.26 >>>>>>> www.idg.se 213.132.126.0/24 216.119.154.106 >>>>>>> lime-technology.com 216.119.154.0/24 80.239.217.185 >>>>>>> www.expressen.se 80.239.217.0/24 ********* Displaying the tunnel IP addresses ******************** 188.126.69.154 ip route delete 0.0.0.0/1 ip route delete 128.0.0.0/1 ********* Displaying all addresses in the array with all commands******************** ip route add 192.71.238.0/24 via 188.126.69.154 dev tap0 ip route add 80.76.155.0/24 via 188.126.69.154 dev tap0 ip route add 80.239.217.0/24 via 188.126.69.154 dev tap0 ip route add 213.132.126.0/24 via 188.126.69.154 dev tap0 ip route add 216.119.154.0/24 via 188.126.69.154 dev tap0 ip route add 80.239.217.0/24 via 188.126.69.154 dev tap0
October 28, 201213 yr Have you figured out a way to do this on a per port basis? For example if I want all http and https traffic to go through the vpn, I would send all traffic through ports 80 and 443 to the tap0 interface? I know it's possible to do this using the iptables command (http://www.linksysinfo.org/index.php?threads/route-only-specific-ports-through-vpn-openvpn.37240/), but this command appears to be disabled in the kernel.
Archived
This topic is now archived and is closed to further replies.