January 30, 201313 yr First off, congrats on this plugin, it's very useful. But I have somewhat of a odd problem. I have two routers: R1 (192.168.2.*) gateway mode R2 (192.168.3.*) router mode My unRAID box sits in on R2 (192.168.3.3). Normally, I don't have any problems with clients on R1 to connect to 192.168.3.3. But when the vpn is up on 192.168.3.3, clients on R1 (192.168.2.*) cannot see the unRAID box. I know it's due to the vpn client just not sure what to change in the routing table if anything. Thoughts? EDIT: nvm added a static route on my unRAID server, seems to work, guess i just to need to figure how to run a script with this route when opevpn connects so i added the following in the openvpn config. with the route add command in it, which i know works on the command line script-security 2 up /boot/openvpn/add_route.sh but i get the following: Starting Openvpn Tunnel: wait ......... nohup: redirecting stderr to stdout The OpenVPN Client is running with Process 27560 Not connected! tun0 don't established, check your account settings!!! Stoping Openvpn Tunnel..... /etc/rc.d/rc.openvpn: line 91: kill: (27560) - No such process ... OK The OpenVPN Client is running with Process 27560 Writing to the plugin config file.... I get this in the syslog dhcpcd[1172]: manage_link: No such device or address
January 30, 201313 yr Author Not connected! tun0 don't established, check your account settings!!! You not have a tun0 created, check ifconfig, this is the new test to verify that the tunnel have been created , and you're using tun0, my case I have tap0 But something goes wrong when going to establish the connection for tun0 What is the code in your file? //Peter
February 1, 201313 yr I'm having the same problem discussed earlier in this thread where openvpn won't start on boot. I can get it to work if I enabled it through web interface, but if I reboot it will fail to start automatically again. I was looking at the plugin and rc script and it seems that the /tmp/openvpn/password.txt file is not getting populated properly from /boot/config/plugins/openvpn/openvpn.cfg before openvpn tries to start on boot. Any chance you can help with this? I am using version 2.6.2.
February 2, 201313 yr Great plugin. Could anyone advise what happens if the VPN is unavailable or disconnects? I want to ensure that internet traffic is blocked if the VPN is unavailable.
February 2, 201313 yr Author I'm having the same problem discussed earlier in this thread where openvpn won't start on boot. I can get it to work if I enabled it through web interface, but if I reboot it will fail to start automatically again. I was looking at the plugin and rc script and it seems that the /tmp/openvpn/password.txt file is not getting populated properly from /boot/config/plugins/openvpn/openvpn.cfg before openvpn tries to start on boot. Any chance you can help with this? I am using version 2.6.2. Update on first post
February 6, 201313 yr Thanks for the continued updates! I can confirm it's starting fine on boot now.
February 6, 201313 yr Great plugin. Could anyone advise what happens if the VPN is unavailable or disconnects? I want to ensure that internet traffic is blocked if the VPN is unavailable. I think there are a couple of ways you could go about ensuring all Internet traffic is blocked if the VPN is unavailable. The way I was doing this before on a different system (not unRAID) running openvpn was to not set a default gateway, set up a bunch of static routes for my provider's VPN servers, and then also add those to my /etc/hosts. When I get around to it I'm going to see if I can get a similar setup going on unRAID using the go script. Unless anyone has any better ideas...
February 7, 201313 yr Great plugin. Could anyone advise what happens if the VPN is unavailable or disconnects? I want to ensure that internet traffic is blocked if the VPN is unavailable. I think there are a couple of ways you could go about ensuring all Internet traffic is blocked if the VPN is unavailable. The way I was doing this before on a different system (not unRAID) running openvpn was to not set a default gateway, set up a bunch of static routes for my provider's VPN servers, and then also add those to my /etc/hosts. When I get around to it I'm going to see if I can get a similar setup going on unRAID using the go script. Unless anyone has any better ideas... This is as I expected. I wasn't sure if it could be configurable via the interface. Other options I've seen (and used on Windows) involve binding interfaces etc. I've not yet had a chance to have a proper play with this yet. I've just finished building my server and the initial disks are preclearing. I think, before I finish setup, I'll have a mess around and see what I can sort... just in case I break anything
February 7, 201313 yr Author Thanks for the continued updates! I can confirm it's starting fine on boot now. New version available, some new function, one is that let you choose if you want autostart or not, read more on first page. One thing to look into is when using extended routing, when disconnect from VPN, may bee these IP addresses need to be reset //Peter
February 12, 201313 yr Great plugin! outstanding work. I followed your instructions on the homepage and removed the space from my "US East.opvn" file (found that out from this thread, I use Private Internet Access) and vuala!!
February 15, 201313 yr Hi, I have installed the latest 2.6.4 version, placed my OVPN file in /boot/openvpn/, and a manually created ca.crt file. I only wish to have my usenet traffic routed through the VPN so I created a /boot/openvpn/webbadress.txt file and each line is the server address of my usenet server I set the extended Routing dropdown to "Route only specific IP addresses" at this point I am able to ping any remote server etc without issue. I start the OpenVPN Client............. after many minutes (4-5) it is running!!! I can see a VPN IP address, status for unraid server is Running, The OpenVPN Client is running with process 29753 GREAT ! I thought...... do I now need to reconfigure something within SABNZBD? as I am seeing my connection state as "Resolving Address" I cannot ping any external server or web address or even my usenet server addresses, its as if all external connection have been denied, ping returns "Host Unknown" have I configured something backwards? Here are my details from the plugin page Fri Feb 15 16:38:23 2013 OpenVPN 2.3.0 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jan 12 2013 Fri Feb 15 16:38:23 2013 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible Fri Feb 15 16:38:23 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Fri Feb 15 16:38:23 2013 UDPv4 link local: [undef] Fri Feb 15 16:38:23 2013 UDPv4 link remote: [AF_INET]208.76.12.4:443 Fri Feb 15 16:38:23 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Fri Feb 15 16:38:24 2013 [server] Peer Connection Initiated with [AF_INET]208.76.12.4:443 Fri Feb 15 16:38:27 2013 TUN/TAP device tun0 opened Fri Feb 15 16:38:27 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Fri Feb 15 16:38:27 2013 /usr/sbin/ip link set dev tun0 up mtu 1500 Fri Feb 15 16:38:27 2013 /usr/sbin/ip addr add dev tun0 local 10.1.0.30 peer 10.1.0.29 Fri Feb 15 16:38:27 2013 Initialization Sequence Completed starting routing ............. >>>>>>> europe-ssl.maximumusenet.com >>>>>>> us-secure.maximumusenet.com >>>>>>> useast.maximumusenet.com VPN Gateway: 10.1.0.30 ip route add .0/24 via 10.1.0.30 dev tun0 ip route add .0/24 via 10.1.0.30 dev tun0 ip route add .0/24 via 10.1.0.30 dev tun0 Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 10.1.0.29 0.0.0.0 UG 0 0 0 tun0 10.1.0.1 10.1.0.29 255.255.255.255 UGH 0 0 0 tun0 10.1.0.29 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 207.76.12.4 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0 tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.1.0.30 P-t-P:10.1.0.29 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:102 errors:0 dropped:0 overruns:0 frame:0 TX packets:1085 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:4080 (3.9 KiB) TX bytes:64761 (63.2 KiB) thanks Markyb0y
February 16, 201313 yr Author Please see this -> http://lime-technology.com/forum/index.php?topic=19439.msg205538#msg205538 About OpenVPN question, please ask the question in the openvpn forum -> https://forums.openvpn.net/, since I maybe cant answer your questions... //Peter
February 16, 201313 yr Please see this -> http://lime-technology.com/forum/index.php?topic=19439.msg205538#msg205538 About OpenVPN question, please ask the question in the openvpn forum -> https://forums.openvpn.net/, since I maybe cant answer your questions... //Peter ok, so even after removing the specific IP routing I would assume that everything would be routed through the VPN, not the case, I still am not able to ping any external address I will continue investigating, but its very confusing to me
February 18, 201313 yr so after another day messing around I am no further the plugin shows the VPN as connected and running, yet I am not able to connect or ping anything if I use extended routing rules then everything else is fine but the routed IPs cannot be connected to or pinged its as if the routing is simply not connecting I have also tried 2 different VPN providers so I do not believe it is the service as both work fine on a OSX desktop I also found that running wget -qO- ifconfig.me/ip from the command line produces the external IP! so I thought I would at least be able to connect to the VPN with no rules so everything is down the VPN and then see my new external IP, but no I just get unknown host my ISP is throttling my usenet access and I am down to 500KB if I am lucky, few weeks back I was clocking up 8MB! thoughts?
February 18, 201313 yr Author This is very strange, what can you ping ? your router? I have no clue right now , my bee you can collect some logs ? //Peter
February 18, 201313 yr as a quick example, before starting the VPN I can run ping www.google.com with no problem start the VPN with no extended rules, eventually its all running, but I CANNOT ping www.google.com if I start the VPN with extended rules, eventually its all running and I CAN ping www.google.com, but not the addresses in the webbadress.txt as I said, its as if whatever is being routed gets stuck and blocked what logs? from where?
February 18, 201313 yr Author something is wrong, it's not route your IP in the file, please verify so you don't have any "DOS" carriage return after each line in webbadress.txt Open putty and then open file in vi, and check. See my log below Mon Feb 18 20:27:09 2013 Initialization Sequence Completed starting routing ............. 193.202.122.24 >>>>>>> ssl-eu.astraweb.com 91.208.207.167 >>>>>>> ssl.astraweb.com 207.246.207.130 >>>>>>> ssl-us.astraweb.com VPN Gateway: 178.73.200.175 ip route add 193.202.122.0/24 via 178.73.200.175 dev tap0 ip route add 91.208.207.0/24 via 178.73.200.175 dev tap0 ip route add 207.246.207.0/24 via 178.73.200.175 dev tap0 Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0 80.67.8.195 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0 80.67.8.198 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0 80.67.8.208 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0 80.67.8.218 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0 80.67.8.221 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0 91.208.207.0 178.73.200.175 255.255.255.0 UG 0 0 0 tap0 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo 178.73.200.128 0.0.0.0 255.255.255.128 U 0 0 0 tap0 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 193.202.122.0 178.73.200.175 255.255.255.0 UG 0 0 0 tap0 207.246.207.0 178.73.200.175 255.255.255.0 UG 0 0 0 tap0 tap0 Link encap:Ethernet HWaddr 3e:b2:d0:1f:ec:61 inet addr:178.73.200.175 Bcast:178.73.200.255 Mask:255.255.255.128 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:188 errors:0 dropped:62 overruns:0 frame:0 TX packets:22 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:19126 (18.6 KiB) TX bytes:5059 (4.9 KiB)
February 24, 201313 yr Trying to setup OpenVPN w/ VyperVPN and keep getting Auth_Failed message when attempting to Enable OpenVPN Client. AUTH: Received control message: AUTH_FAILED Sun Feb 24 00:38:39 2013 OpenVPN 2.3.0 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jan 12 2013 Sun Feb 24 00:38:39 2013 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible Sun Feb 24 00:38:39 2013 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page). Sun Feb 24 00:38:39 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Sun Feb 24 00:38:39 2013 Socket Buffers: R=[163840->131072] S=[163840->131072] Sun Feb 24 00:38:39 2013 UDPv4 link local: [undef] Sun Feb 24 00:38:39 2013 UDPv4 link remote: [AF_INET]209.99.20.19:1194 Sun Feb 24 00:38:39 2013 TLS: Initial packet from [AF_INET]209.99.20.19:1194, sid=a539ce27 602fffe8 Sun Feb 24 00:38:39 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Sun Feb 24 00:38:40 2013 VERIFY OK: depth=1, C=KY, ST=GrandCayman, L=GeorgeTown, O=GoldenFrog-Inc, CN=GoldenFrog-Inc CA, [email protected] Sun Feb 24 00:38:40 2013 VERIFY X509NAME OK: C=KY, ST=GrandCayman, L=GeorgeTown, O=GoldenFrog-Inc, CN=us3.vpn.giganews.com, [email protected] Sun Feb 24 00:38:40 2013 VERIFY OK: depth=0, C=KY, ST=GrandCayman, L=GeorgeTown, O=GoldenFrog-Inc, CN=us3.vpn.giganews.com, [email protected] Sun Feb 24 00:38:43 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sun Feb 24 00:38:43 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Feb 24 00:38:43 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sun Feb 24 00:38:43 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Feb 24 00:38:43 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Sun Feb 24 00:38:43 2013 [us3.vpn.giganews.com] Peer Connection Initiated with [AF_INET]209.99.20.19:1194 Sun Feb 24 00:38:45 2013 SENT CONTROL [us3.vpn.giganews.com]: 'PUSH_REQUEST' (status=1) Sun Feb 24 00:38:45 2013 AUTH: Received control message: AUTH_FAILED Sun Feb 24 00:38:45 2013 SIGTERM[soft,auth-failure] received, process exiting One thing I notice is the /boot/config/plugins/openvpn/password.txt contains both my userid and password with no delimiter. Not sure the exact architecture of how password.txt is used with this plugin but I'd expect at least a delimiter in the file. For example if my userid = "USER1" and my password = "PASSWORD1" the password.txt would contain: USER1PASSWORD1
February 24, 201313 yr Author Trying to setup OpenVPN w/ VyperVPN and keep getting Auth_Failed message when attempting to Enable OpenVPN Client. For example if my userid = "USER1" and my password = "PASSWORD1" the password.txt would contain: USER1PASSWORD1 If you open the file in a unix friendly editor you see there is 2 line And it looks like your pass/user is not accepted with your provider //Peter
February 24, 201313 yr Ratfink: I had a similar problem setting up a VyprVPN, until I tried using the 256 setups. It looks like you are using the 160. Also, make sure that you have opted in for OpenVPN with Giganews (it's extra, and easy to miss). Hope that helps. I did get mine working, and it works well now.
February 24, 201313 yr Can you attach your ovpn file? client dev tun proto udp remote us3.vpn.giganews.com 1194 resolv-retry infinite nobind persist-key persist-tun persist-remote-ip ca ca.vyprvpn.com.crt tls-remote us3.vpn.giganews.com auth-user-pass /boot/config/plugins/openvpn/password.txt comp-lzo verb 3 I've tried both 256 and 160 encryption. My VyperVPN works over windows and my phone and I've double check and re-checked userid/password. I'm 100% sure my credentials are correct.
February 24, 201313 yr Author Can you attach your ovpn file? client dev tun proto udp remote us3.vpn.giganews.com 1194 resolv-retry infinite nobind persist-key persist-tun persist-remote-ip ca ca.vyprvpn.com.crt tls-remote us3.vpn.giganews.com auth-user-pass /boot/config/plugins/openvpn/password.txt comp-lzo verb 3 I've tried both 256 and 160 encryption. My VyperVPN works over windows and my phone and I've double check and re-checked userid/password. I'm 100% sure my credentials are correct. Looks OK, what error do you see in the log window?
February 25, 201313 yr Copy of my 256 encryption log attempt. Sun Feb 24 22:15:56 2013 OpenVPN 2.3.0 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jan 12 2013 Sun Feb 24 22:15:56 2013 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible Sun Feb 24 22:15:56 2013 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page). Sun Feb 24 22:15:56 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Sun Feb 24 22:15:56 2013 Socket Buffers: R=[163840->131072] S=[163840->131072] Sun Feb 24 22:15:56 2013 UDPv4 link local: [undef] Sun Feb 24 22:15:56 2013 UDPv4 link remote: [AF_INET]209.99.20.19:443 Sun Feb 24 22:15:56 2013 TLS: Initial packet from [AF_INET]209.99.20.19:443, sid=9fc7ba08 b9f0bd57 Sun Feb 24 22:15:56 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Sun Feb 24 22:15:57 2013 VERIFY OK: depth=1, C=KY, ST=GrandCayman, L=GeorgeTown, O=GoldenFrog-Inc, CN=GoldenFrog-Inc CA, [email protected] Sun Feb 24 22:15:57 2013 VERIFY X509NAME OK: C=KY, ST=GrandCayman, L=GeorgeTown, O=GoldenFrog-Inc, CN=us3.vpn.giganews.com, [email protected] Sun Feb 24 22:15:57 2013 VERIFY OK: depth=0, C=KY, ST=GrandCayman, L=GeorgeTown, O=GoldenFrog-Inc, CN=us3.vpn.giganews.com, [email protected] Sun Feb 24 22:16:00 2013 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Sun Feb 24 22:16:00 2013 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Sun Feb 24 22:16:00 2013 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Sun Feb 24 22:16:00 2013 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Sun Feb 24 22:16:00 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Sun Feb 24 22:16:00 2013 [us3.vpn.giganews.com] Peer Connection Initiated with [AF_INET]209.99.20.19:443 Sun Feb 24 22:16:02 2013 SENT CONTROL [us3.vpn.giganews.com]: 'PUSH_REQUEST' (status=1) Sun Feb 24 22:16:02 2013 AUTH: Received control message: AUTH_FAILED Sun Feb 24 22:16:02 2013 SIGTERM[soft,auth-failure] received, process exiting
February 25, 201313 yr Contacted VyperVPN and they're trying to say it's an additional $5 charge for OpenVPN. I'm a Diamond Giganews member and there's no mention of a $5 up charge. So anyhow this is why OpenVPN isn't connecting for me at the moment. Anyone else getting forced to pay the $5 up charge even though your a Diamond Giganews member?
Archived
This topic is now archived and is closed to further replies.