Skip to content
View in the app

A better way to browse. Learn more.
Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Unraid Summer Sale in live: 20% off Starter and Unleashed + buy one, get one 50% off

OpenVPN Server Plugin : 32-bit and 64-bit Version

peter_sm
in 6.0 (Unverified)

Featured Replies

how do I get my vpn client to see other machines on my network since they don't have a 10.8.0.0 ip?

  • 4 weeks later...
  • Replies 381
  • Views 87.2k
  • Created
  • Last Reply

any chance of this going 64bit?

If it's external to the local network, then it won't see them

 

Yes this will get updated to 64 bit

  • Author

I have Both client and server plugin done, I'm testing in my VM. however these are on my GIT, some more testing , but it's looks like .I can let you verify these as well

 

 

Sent from my iPhone using Tapatalk 2

  • Author

OpenVPN server x64 version on first post!

 

Please test and report anything that needs to be fixed.

 

//Peter

 

  • 2 weeks later...

been playing with it for a 2 hours now. finaly got all the green checks and got sabnzbd to play nice

but nothing happens when i click start. now im really stumped =/

  • 1 month later...

Hi Peter

 

Is there a way to keep the plug in on even if you stop the array? Some times I need to restart the array remotely but the second you stop the array the VPN closes.

 

Thank you

 

 

 

 

Thornwood

You can edit the plugin

 

remark line 1599 to disable auto stop of the OpenVPN server.

 

 

  • Author

New version available.

 

New settings Disconnect OpenVPN Server when stopping array: Yes / No

 

Please try.

 

//Peter

Thank you very much I will try right now. Thank you again.

 

 

Thornwood

Works great thank you again you rock! :-)

 

 

Thornwood

  • 2 weeks later...

Hi Peter,

I am using the 64bit version on Beta 6.4. I got the server set up and it is working, the only thing that is not working for me is the button "Save below configuration".

When I edit any field in the config and then press the button, all settings are erased from the config file under /boot/config/plugins/openvpnserver/openvpnserver.cfg

 

I had to manually edit both config files to get the server up and running, but now i want to add encryption and since i cant save from the WEB-UI I dont know what to fill into the config....

 

I tried hitting the button on Win 7 machine with Iron, Chrome and a vanilla Firefox install and on Linux Mint on Chrome and Firefox, the behaviour is the same everywhere.

 

What kind of Information and Logs do you need?

In the SysLog it only states: "rc.openvpnserver[7991]: Plugin configuration written"

 

 

 

Also, any chance of upgrading to OpenVPN Software Build 2.3.3?

 

Thanks a lot for the plugin! :)

  • Author

64bit B4 have some issue with PHP, right now I do not know how to solve this. This break to save config.

 

 

And I'm going to upgrade OpenVPN as well.

 

//Peter

 

Thank you and maybe you should mention the PHP problem in your first post. Along with the variables that can be used in the cfg files :-)

Hi, I hope it is allowed to post my problem into this thread...

 

So far I have set up Openvpn Server on the latest beta 4. It is working that i can connect remotely to the unraid server BUT only to the unraid server and not to the LAN behind it. For example I can not connect to my router on 192.168.1.1

The client is a Windows 7 machine running Openvpn 2.3.3

 

All my machines are at 192.168.1.xx, the gateway is 192.168.1.1.

I have forwarded port 1194 to my unraid server IP adress and tried to add "net.ipv4.ip_forward = 1" to /etc/sysctl.conf but that didnt help.

 

I guess my problem is trivial, but i can not find a way to get it working. Any help would be highly apprechiated!!!

 

My server config:

server 10.8.0.0 255.255.255.0
dev tun
port 1194
proto udp
dh /mnt/cache/apps/ovpn/server/dh2048.pem
ca /mnt/cache/apps/ovpn/server/ca.crt
cert /mnt/cache/apps/ovpn/server/server.crt
key /mnt/cache/apps/ovpn/server/server.key
ifconfig-pool-persist /mnt/cache/apps/ovpn/server/ipp.txt
push "dhcp-option DNS 8.8.8.8"
tls-server
verb 3
tls-auth /mnt/cache/apps/ovpn/server/ta.key 0
persist-key
persist-tun
keepalive 10 120
user nobody
group users
client-to-client
comp-lzo
push "route 192.168.1.0 255.255.255.0"
;push "redirect-gateway def1 bypass-dhcp"
push "resolv-retry infinite"
status /var/log/openvpnserver-status.log 5
log-append /var/log/openvpnserver.log
status-version 2

 

My client config:

remote xxx.xxx.xxx

 

 

client

dev tun

proto udp

port 1194

resolv-retry infinite

tls-client

nobind

persist-key

persist-tun

ca ca.crt

cert stefan_windows.crt

key stefan_windows.key

tls-auth ta.key 1

remote-cert-tls server

comp-lzo

verb 3

route-delay 2

 

 

 

Here is my the output from the openvpn plugin

 

default via 192.168.1.1 dev br0  metric 1 
10.8.0.0/24 via 10.8.0.2 dev tun0 
10.8.0.2 dev tun0  proto kernel  scope link  src 10.8.0.1 
127.0.0.0/8 dev lo  scope link 
192.168.1.0/24 dev br0  proto kernel  scope link  src 192.168.1.40

 

TITLE,OpenVPN 2.3.2 x86_64-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Oct 12 2013
TIME,Wed Apr 16 17:38:13 2014,1397662693
HEADER,CLIENT_LIST,Common Name,Real Address,Virtual Address,Bytes Received,Bytes Sent,Connected Since,Connected Since (time_t),Username
HEADER,ROUTING_TABLE,Virtual Address,Common Name,Real Address,Last Ref,Last Ref (time_t)
GLOBAL_STATS,Max bcast/mcast queue length,0
END

 

Wed Apr 16 17:45:26 2014 OpenVPN 2.3.2 x86_64-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Oct 12 2013
Wed Apr 16 17:45:26 2014 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Wed Apr 16 17:45:26 2014 Diffie-Hellman initialized with 2048 bit key
Wed Apr 16 17:45:26 2014 Control Channel Authentication: using '/mnt/cache/apps/ovpn/server/ta.key' as a OpenVPN static key file
Wed Apr 16 17:45:26 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:45:26 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:45:26 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Apr 16 17:45:26 2014 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=br0 HWADDR=bc:5f:f4:85:11:9b
Wed Apr 16 17:45:26 2014 TUN/TAP device tun0 opened
Wed Apr 16 17:45:26 2014 TUN/TAP TX queue length set to 100
Wed Apr 16 17:45:26 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 16 17:45:26 2014 /usr/sbin/ip link set dev tun0 up mtu 1500
Wed Apr 16 17:45:26 2014 /usr/sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Wed Apr 16 17:45:26 2014 /usr/sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Apr 16 17:45:26 2014 GID set to users
Wed Apr 16 17:45:26 2014 UID set to nobody
Wed Apr 16 17:45:26 2014 UDPv4 link local (bound): [undef]
Wed Apr 16 17:45:26 2014 UDPv4 link remote: [undef]
Wed Apr 16 17:45:26 2014 MULTI: multi_init called, r=256 v=256
Wed Apr 16 17:45:26 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Apr 16 17:45:26 2014 ifconfig_pool_read(), in='stefan,10.8.0.4', TODO: IPv6
Wed Apr 16 17:45:26 2014 succeeded -> ifconfig_pool_set()
Wed Apr 16 17:45:26 2014 ifconfig_pool_read(), in='stefan_windows,10.8.0.8', TODO: IPv6
Wed Apr 16 17:45:26 2014 succeeded -> ifconfig_pool_set()
Wed Apr 16 17:45:26 2014 IFCONFIG POOL LIST
Wed Apr 16 17:45:26 2014 stefan,10.8.0.4
Wed Apr 16 17:45:26 2014 stefan_windows,10.8.0.8
Wed Apr 16 17:45:26 2014 Initialization Sequence Completed
Wed Apr 16 17:46:09 2014 213.162.68.151:60518 TLS: Initial packet from [AF_INET]213.162.68.151:60518, sid=6c9e54ce 69548d19
Wed Apr 16 17:46:10 2014 213.162.68.151:60518 VERIFY OK: depth=1, C=DE, ST=ELSEWHERE, L=NOWHERE, O=IT-DIVISION, OU=VPN-CLIENT, CN=IT-DIVISION CA, name=EasyRSA, [email protected]
Wed Apr 16 17:46:10 2014 213.162.68.151:60518 VERIFY OK: depth=0, C=DE, ST=ELSEWHERE, L=NOWHERE, O=IT-DIVISION, OU=VPN-CLIENT, CN=stefan_windows, name=EasyRSA, [email protected]
Wed Apr 16 17:46:11 2014 213.162.68.151:60518 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 16 17:46:11 2014 213.162.68.151:60518 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:46:11 2014 213.162.68.151:60518 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 16 17:46:11 2014 213.162.68.151:60518 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:46:11 2014 213.162.68.151:60518 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Apr 16 17:46:11 2014 213.162.68.151:60518 [stefan_windows] Peer Connection Initiated with [AF_INET]213.162.68.151:60518
Wed Apr 16 17:46:11 2014 stefan_windows/213.162.68.151:60518 MULTI_sva: pool returned IPv4=10.8.0.10, IPv6=(Not enabled)
Wed Apr 16 17:46:11 2014 stefan_windows/213.162.68.151:60518 MULTI: Learn: 10.8.0.10 -> stefan_windows/213.162.68.151:60518
Wed Apr 16 17:46:11 2014 stefan_windows/213.162.68.151:60518 MULTI: primary virtual IP for stefan_windows/213.162.68.151:60518: 10.8.0.10
Wed Apr 16 17:46:13 2014 stefan_windows/213.162.68.151:60518 PUSH: Received control message: 'PUSH_REQUEST'
Wed Apr 16 17:46:13 2014 stefan_windows/213.162.68.151:60518 send_push_reply(): safe_cap=940
Wed Apr 16 17:46:13 2014 stefan_windows/213.162.68.151:60518 SENT CONTROL [stefan_windows]: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,route 192.168.1.0 255.255.255.0,resolv-retry infinite,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9' (status=1)

 

My openvpnserver.cfg: 

# openvpnserver plugin configuration
INSTALL_ON_BOOT="enable"
SERVER_PATH=/mnt/cache/apps/ovpn/server
SERVER_MODE=tun
NETWORK=10.8.0.0
NETMASK=255.255.255.0
SERVER_PORT=1194
CANONICAL=""
PROTOCOL=udp
CHIPHER=""
CLIENT="Enable"
HASH_ALGO=""
GATEWAY="Disable"
SUBNET="Disable"
LAN_SUBNET="Enable"
COMP_LZO="comp-lzo"
IPP="ipp.txt"
DHCP_1="dhcp-option DNS 8.8.8.8"
DHCP_2=""

 

Here is the Openvpn Log:

 

Wed Apr 16 17:46:10 2014 OpenVPN 2.3.3 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [iPv6] built on Apr  9 2014
Enter Management Password:
Wed Apr 16 17:46:10 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Apr 16 17:46:10 2014 Need hold release from management interface, waiting...
Wed Apr 16 17:46:11 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Apr 16 17:46:11 2014 MANAGEMENT: CMD 'state on'
Wed Apr 16 17:46:11 2014 MANAGEMENT: CMD 'log all on'
Wed Apr 16 17:46:11 2014 MANAGEMENT: CMD 'hold off'
Wed Apr 16 17:46:11 2014 MANAGEMENT: CMD 'hold release'
Wed Apr 16 17:46:11 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Apr 16 17:46:11 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:46:11 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:46:11 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Apr 16 17:46:11 2014 MANAGEMENT: >STATE:1397663171,RESOLVE,,,
Wed Apr 16 17:46:11 2014 UDPv4 link local: [undef]
Wed Apr 16 17:46:11 2014 UDPv4 link remote: [AF_INET]XXX.XXX.XXX:1194
Wed Apr 16 17:46:11 2014 MANAGEMENT: >STATE:1397663171,WAIT,,,
Wed Apr 16 17:46:11 2014 MANAGEMENT: >STATE:1397663171,AUTH,,,
Wed Apr 16 17:46:11 2014 TLS: Initial packet from [AF_INET]XXX.XXX.XXX:1194, sid=fe7e94eb ac3ea6ad
Wed Apr 16 17:46:12 2014 VERIFY OK: depth=1, C=DE, ST=ELSEWHERE, L=NOWHERE, O=IT-DIVISION, OU=VPN-CLIENT, CN=IT-DIVISION CA, name=EasyRSA, [email protected]
Wed Apr 16 17:46:12 2014 Validating certificate key usage
Wed Apr 16 17:46:12 2014 ++ Certificate has key usage  00a0, expects 00a0
Wed Apr 16 17:46:12 2014 VERIFY KU OK
Wed Apr 16 17:46:12 2014 Validating certificate extended key usage
Wed Apr 16 17:46:12 2014 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Apr 16 17:46:12 2014 VERIFY EKU OK
Wed Apr 16 17:46:12 2014 VERIFY OK: depth=0, C=DE, ST=ELSEWHERE, L=NOWHERE, O=IT-DIVISION, OU=VPN-CLIENT, CN=server, name=EasyRSA, [email protected]
Wed Apr 16 17:46:13 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 16 17:46:13 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:46:13 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 16 17:46:13 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 17:46:13 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Apr 16 17:46:13 2014 [server] Peer Connection Initiated with [AF_INET]XXX:XXX:XXX:1194
Wed Apr 16 17:46:14 2014 MANAGEMENT: >STATE:1397663174,GET_CONFIG,,,
Wed Apr 16 17:46:15 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Apr 16 17:46:15 2014 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,route 192.168.1.0 255.255.255.0,resolv-retry infinite,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9'
Wed Apr 16 17:46:15 2014 Options error: option 'resolv-retry' cannot be used in this context ([PUSH-OPTIONS])
Wed Apr 16 17:46:15 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Apr 16 17:46:15 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Apr 16 17:46:15 2014 OPTIONS IMPORT: route options modified
Wed Apr 16 17:46:15 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Apr 16 17:46:15 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 16 17:46:15 2014 MANAGEMENT: >STATE:1397663175,ASSIGN_IP,,10.8.0.10,
Wed Apr 16 17:46:15 2014 open_tun, tt->ipv6=0
Wed Apr 16 17:46:15 2014 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{7D009652-8546-49F3-8FB5-B905428552A3}.tap
Wed Apr 16 17:46:15 2014 TAP-Windows Driver Version 9.9 
Wed Apr 16 17:46:15 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {7D009652-8546-49F3-8FB5-B905428552A3} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Wed Apr 16 17:46:15 2014 Successful ARP Flush on interface [30] {7D009652-8546-49F3-8FB5-B905428552A3}
Wed Apr 16 17:46:17 2014 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Wed Apr 16 17:46:17 2014 MANAGEMENT: >STATE:1397663177,ADD_ROUTES,,,
Wed Apr 16 17:46:17 2014 C:\Windows\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 10.8.0.9
Wed Apr 16 17:46:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Apr 16 17:46:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Apr 16 17:46:17 2014 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.9
Wed Apr 16 17:46:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Apr 16 17:46:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Apr 16 17:46:17 2014 Initialization Sequence Completed
Wed Apr 16 17:46:17 2014 MANAGEMENT: >STATE:1397663177,CONNECTED,SUCCESS,10.8.0.10,XXX.XXX.XXX
Wed Apr 16 17:46:25 2014 C:\Windows\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.9
Wed Apr 16 17:46:25 2014 Route deletion via IPAPI succeeded [adaptive]
Wed Apr 16 17:46:25 2014 C:\Windows\system32\route.exe DELETE 192.168.1.0 MASK 255.255.255.0 10.8.0.9
Wed Apr 16 17:46:25 2014 Route deletion via IPAPI succeeded [adaptive]
Wed Apr 16 17:46:25 2014 Closing TUN/TAP interface
Wed Apr 16 17:46:25 2014 SIGTERM[hard,] received, process exiting
Wed Apr 16 17:46:25 2014 MANAGEMENT: >STATE:1397663185,EXITING,SIGTERM,,

You will have a wider audience over at forums.openvpn.net.  I had the same problem when I had this installed before, found solutions for window based servers but never got time to revisit it for unRAID

I'll post it over there too, but since we have a modified Slackware as system, I thought it's more useful to post it here :-)

You will have a wider audience over at forums.openvpn.net.  I had the same problem when I had this installed before, found solutions for window based servers but never got time to revisit it for unRAID

 

I'm having an issue using the 32 bit plugin on unRAID 5.0.5, should I pursue the issue at OpenVPN, or is there even any support for it here since the 6.? Beta seems to be the push?

 

 

Hi all,

 

I can not start the OpenVPN Server plugin.

 

I'm running:

unRaid 5.0.5 final

SimpleFeatures 1.0.11

Cache Directories 1.6.7

iStat Server 0.5.8

PMS Updater 0.9.9.7.429-f80a8d6

PMS Server 0.9.9.7.429-f80a8d6

SABnzbd+ 0.7.17

Sick Beard a211e87bf797dd b9829472eda6d2 2b0d666ecfe6

S.N.A.P. 5.27

 

OpenVPN Server 2.3.3

 

I have installed the cert software, Created the cert's and config files for the server, and Created the server config file.

I have the three green checkmarks.

 

When i push the Start button i see these messages at the bottom of the screen

Starting OpenVPN server

OK... Started

 

But the status on the OpenVPN Server screen stays at OpenVPN Server is NOT RUNNING

 

I have opened the port 1194 in the firewall.

I have created one client.

I have rebooted the server already several times.

 

Still i can not start the OpenVPN Server.

 

I have looked for the OpenVPN server log file at /var/log/openvpnserver.log but that file does not exists

 

I have attached the screen shot of the settings page for the OpenVPN server aswel as the syslog file

 

I hope someone can help me get the server running.

 

Regards, Rob.

syslog.zip

openvpnserver.jpg.0e52edd5914c6b0f9bf564030f71f1e9.jpg

Sab is installing an earlier version of OpenSSL, the plugin needs to be edited to download the latest version

 

use notepad ++ to edit the sab.plg file

 

ctrl + h to find/replace

 

replace openssl-0.9.8r-i486-3.txz with openssl-1.0.1e-i486-1.txz (1 instance) - dont replace the second instance, use the below

 

replace http://slackware.cs.utah.edu/pub/slackware/slackware-13.37/slackware/n/openssl-0.9.8r-i486-3.txz with http://slackware.cs.utah.edu/pub/slackware/slackware-current/slackware/n/openssl-1.0.1e-i486-1.txz (1 instance)

 

replace dd6ef02ebfe3e54fc54c03a52f736197 with 3ef010a9da36b042d6724ebf00061192

 

This is a fix I used before, you would have to check the above is still the latest version

 

You will have a wider audience over at forums.openvpn.net.  I had the same problem when I had this installed before, found solutions for window based servers but never got time to revisit it for unRAID

 

I'm having an issue using the 32 bit plugin on unRAID 5.0.5, should I pursue the issue at OpenVPN, or is there even any support for it here since the 6.? Beta seems to be the push?

 

Still support here for the plugin whether it's v5 or v6. I suggested the above as it was more related to openvpn settings rather than the plugin itself

 

Hi, I hope it is allowed to post my problem into this thread...

 

So far I have set up Openvpn Server on the latest beta 4. It is working that i can connect remotely to the unraid server BUT only to the unraid server and not to the LAN behind it. For example I can not connect to my router on 192.168.1.1

The client is a Windows 7 machine running Openvpn 2.3.3

 

All my machines are at 192.168.1.xx, the gateway is 192.168.1.1.

I have forwarded port 1194 to my unraid server IP adress and tried to add "net.ipv4.ip_forward = 1" to /etc/sysctl.conf but that didnt help.

 

I guess my problem is trivial, but i can not find a way to get it working. Any help would be highly apprechiated!!!

 

My server config:

server 10.8.0.0 255.255.255.0
dev tun
port 1194
proto udp
dh /mnt/cache/apps/ovpn/server/dh2048.pem
ca /mnt/cache/apps/ovpn/server/ca.crt
cert /mnt/cache/apps/ovpn/server/server.crt
key /mnt/cache/apps/ovpn/server/server.key
ifconfig-pool-persist /mnt/cache/apps/ovpn/server/ipp.txt
push "dhcp-option DNS 8.8.8.8"
tls-server
verb 3
tls-auth /mnt/cache/apps/ovpn/server/ta.key 0
persist-key
persist-tun
keepalive 10 120
user nobody
group users
client-to-client
comp-lzo
push "route 192.168.1.0 255.255.255.0"
;push "redirect-gateway def1 bypass-dhcp"
push "resolv-retry infinite"
status /var/log/openvpnserver-status.log 5
log-append /var/log/openvpnserver.log
status-version 2

 

My client config:

remote xxx.xxx.xxx

 

 

client

dev tun

proto udp

port 1194

resolv-retry infinite

tls-client

nobind

persist-key

persist-tun

ca ca.crt

cert stefan_windows.crt

key stefan_windows.key

tls-auth ta.key 1

remote-cert-tls server

comp-lzo

verb 3

route-delay 2

 

[/code]

 

https://www.grc.com/vpn/routing.htm

 

This might explain why you cannot see beyond unRAID, the VPN virtual adaptor needs to be bridged to the physical adaptor.

 

Next step is finding how to do this in unRAID

I found out about routing as well, but since you need to edit the iptables and although they are somewhat included in unRAID, I was hesitant to actually mess around with them.

BUT i had a RaspberryPi lying around without any use, so i set up an OpenVPN Server with routing and everything and it is working great.

 

Sitting at my girlfriends place and playing around with VMs ;)

I dont use this plugin so cannot check directly but based on looking at the code i believe the current version for v5 is vulnerable to heart blead as it uses openssl-1.0.1c-i486-3.txz.

 

As per the advisory, OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable

 

Anyone using the 64 bit version will not be vulnerable ONLY if they are using v6 beta 5a or have manually patched the hole i.e pevious v6 beta will also be vulnerable.

 

 

If i am right I cannot stress how serious this is.

 

I would recommend this is addressed (or debunked)  immediately and given the nature of what it is used for disabled until such time.

I have replace the openssl reference in the openvpn_server.plg file on my own machine with :

 

<FILE Name="/boot/packages/openssl-1.0.1g-i486-1.txz" Run="upgradepkg --install-new">
<URL>http://slackware.cs.utah.edu/pub/slackware/slackware-current/slackware/n/openssl-1.0.1g-i486-1.txz</URL>
<MD5>bf07a4b17f1c78a4081e2cfb711b8748</MD5>
</FILE>

 

and installed the openvpn server, the server is up and running.

 

This version of openssl does not have the heartbleed bug,

 

THIS IS A FIX YOU CAN INSTALL ON YOUR OWN MACHINE ....

 

Regards

Rob.

 

ps. make sure to replace the openssl reference in the sabnzbd_unplugged.plg file too otherwise it will not work.

 

05-05-2014 14:03 - clarification added.

 

Archived

This topic is now archived and is closed to further replies.

Go to topic listing

Account

Navigation

Search

Search

Configure browser push notifications
Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.