Questions tagged [openvpn]
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
223
questions
1
vote
0answers
39 views
Stronger OpenVPN encryption needs higher spec server? [migrated]
I am testing my OpenVPN server (Debian 10, 1 CPU core, 2 GB RAM) I want to use stronger encryption.
But I feel network speed is slow with a stronger encryption cipher (SHA512, AES-256).
If I change ...
0
votes
2answers
70 views
Can app / service provider konw when its user using (selfhost) VPN server?
Let's say I setup openVPN at home, then I go out.
I connect my ios with openVPN server at home, then I download Netflix app. then I turn off location and any necessary tracking feature on ios. I ...
0
votes
0answers
30 views
OpenVPN bridge - using same interface for internet connection
For setting a vpn connection in bridge mode using openvpn, the documentation of OpenVPN for configuring a bridge mentions that the OpenVPN client must have at least two Ethernet interfaces, one ...
0
votes
0answers
67 views
OpenVPN client suddenly refuses to connect to my self-hosted VPN
It's been working fine for years, but now suddenly I'm getting a strange error. Does anyone know what problem this points to?
OpenVPN Connect Version 3.0.2 (598), error logs:
[REDACTED IPs]
5/16/2021,...
0
votes
1answer
131 views
Can my company track my laptop if I've reinstalled the operating system?
I was given a laptop by my company. I reinstalled everything and now I occasionally open Whatsapp web in the background to reply to messages. Most of the times my laptop is connected to the Company's ...
3
votes
1answer
110 views
VPN doubt about “encrypting” an IP address
According to Kaspersky
Encryption of your IP address: The primary job of a VPN is to hide
your IP address from your ISP and other third parties. This allows you
to send and receive information online ...
1
vote
2answers
106 views
Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't
I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10.
I now want to emulate the "kill switch" feature of most ...
0
votes
0answers
34 views
OpenVPN certificates vs. SSO with MFA
I am wondering, is using certificates with OpenVPN gives any advantages vs. using SSO with MFA to authenticate to OpenVPN?
Are there any disadvantages for combining both?
0
votes
0answers
46 views
Does an OpenVPN client attemtping to connect a wrong server IP poses a security risk?
I have an OpenVPN server setup at home and the public IP address I get from my Internet Service Provider is dynamic, not fixed. In the configuration file of a VPN client, the IP address of the server ...
0
votes
1answer
63 views
Internet privacy, VPNs, etc. Am I anonymous? [duplicate]
I am a member of a forum that recently disabled my account because their system picked up another account from my household. Anyways their terms of rectifying the situation are pretty invasive to my ...
0
votes
1answer
46 views
Limiting VPC subnet access for NAT OpenVPN clients
I'm currently testing OpenVPN to give developers limited access to AWS VPC's.
Assuming I have 3 VPC's... VPC-A, VPC-B, VPC-C, each of these with private and public subnets.
The OpenVPN server will be ...
0
votes
0answers
30 views
Firewall rule such that I can only acess a website with VPN
I want to create a firewall rule such that I can only access a Website with VPN enabled. But I can't seem to find an option in windows firewall to say if my protocoll is not openvpn I can't access the ...
0
votes
1answer
107 views
Mixing VPN Protocols
Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
1
vote
0answers
46 views
Openvpn not hiding dns, using tcp
I am using same configuration files for OpenVPN, same operating system (ubuntu 20) on two different laptops, but I notice with Wireshark, then on one of them, the VPN connection goes through UDP, ...
0
votes
0answers
70 views
Routing a site-to-site VPN through my regular VPN service
currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS.
cscotun0
We typically connect to the lab/domain ...
0
votes
0answers
42 views
Difference between IKEv1 and IKEv2?
Can someone tell me the difference between IKEv1 and IKEv2 in terms of security functionality?
Wherever I refer it was mentioned as IKEv1 has 9 messages while IKEv2 has 4 messages, IKEv2 has less RTT ...
0
votes
1answer
117 views
How VPN works internally [closed]
The VPN is used to establish a secure connection (creating a tunnel) to another network over the Internet. It masks our IP address and geographical location and also when the information enters the ...
0
votes
1answer
495 views
How does openvpn work for only certain servers?
I got a *.openvpn from work and I monitored the traffic on wireshark.
On my normal vpn every traffic is routed via the vpn (as expected).
But with this work vpn only the traffic that uses the work ...
0
votes
0answers
60 views
Undetectable Proxy or VPN Protocol
Is there a safe way for creating a proxy, tunnel, or VPN that cannot be detected by the datacenter or ISPs?
I'm living in an oppressing country, but I've access to a VPS with less regulated access to ...
0
votes
0answers
189 views
OpenVPN: test security from external point of view
How would I test an OpenVPN environment from external, kind of black box pentest.
I have the public server-IP (port 1194, udp, tun).
I have found NO online ressources on how to do that, or whether ...
3
votes
1answer
373 views
OpenVPN Key Size 1024 vs 2048 and Eavesdrop vs Access?
OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I'm using is somewhat weak and defaults to using a 1024 RSA key size. I'm trying to determine if it's worth ...
3
votes
4answers
5k views
Using OpenVPN on Windows instead of VPN apps: missing certificate
Sorry this might be a noob question, but I subscribed to a VPN provider which ships its own app on Windows. Now I thought I'd prefer to use the OpenVPN client app instead.
I create a profile by ...
0
votes
0answers
104 views
How secure is /dev/stdin in UNIX systems?
Is decrypting secrets with ccrypt and piping the result via stdin to openvpn secure?
I've written the following alias to start an openvpn client more easily than before:
sudo bash -c 'cd ...
0
votes
1answer
72 views
Which methods should I connect a VPN, via that-vpn-app or through an VPN configuration on network manager linux?
I saw there are 2 available methods (that I know of and currently focusing on) to connect to a vpn. The first one is through their application based of that vpn provider. The others is by configuring ...
1
vote
4answers
177 views
How to avoid leaking your public IP to installed applications like browsers when using a vpn?
What is the easiest setup to hide your public IP from installed applications and prevent things like WebRTC leaks on a common Linux distro?
0
votes
1answer
30 views
Combine router VPN with Client VPN
I would like to combine my router's default VPN with another one I run on my laptop.
Here is what I currently have :
Here is what I would like to have :
Both router (DD-WRT) and laptop use OpenVPN ...
0
votes
1answer
63 views
When pushing a DNS resolver to an OpenVPN client, does the resolver see the IP address of the client or the OpenVPn server?
When configuring an OpenVPN server, you have the option of pushing DNS resolvers to the client - like so:
push "dhcp-option DNS "
If this approach is used and a public DNS resolver is defined, will ...
1
vote
1answer
336 views
ecdh-curve and tls cipher do not work together
most of my question are already answered by reading in this forum, but "one last thing" is still open.
I am running a OpenVPN server with the following security characters:
SERVER (Raspbian Buster)...
1
vote
1answer
132 views
Antivirus/DPI Solution with openvpn server
I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
1
vote
1answer
1k views
Block WireGuard clients' access to specific websites
I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to
either block the VPN clients to access specific websites (i.e. block them access https://...
0
votes
0answers
101 views
Opening OpenVPN to the world
I built my own private network with OpenVPN. I bought a VPS at hosting provider A(closer to home) and another two at hosting provider B(cheaper). Using openvpn I connected the two to the OpenVPN ...
1
vote
2answers
150 views
Meterpreter Session over OpenVPN [closed]
Last month I made a pentesting course and now they opened a lab for us to practice before we apply for the certification exam. We connect to the lab over OpenVPN in our Kali Linux machine.
I'm trying ...
-1
votes
1answer
294 views
Does OpenVPN encrypt my traffic between my computer and VPN server?
I set up my own VPN by installing OpenVPN on a Ubuntu server, then I download client.ovpn file from Ubuntu server to my Windows laptop. And then, I import that client.ovpn to OpenVPN GUI app on ...
-4
votes
1answer
670 views
Which VPN offers more security conceptually, SSL VPN or L2TP/IPSEC?
Aside from possible implementation bugs, which VPN concept aims to offer more protection by design?
SSL VPN (implementation example - OpenVPN)
L2TP/IPSEC (implementation example - Strong Swan)
After ...
0
votes
1answer
110 views
Can't tell If The OpenVPN Server I Setup Is Encrypted using Wireshark?
This might sound dumb, but I set up an OpenVPN server on a Synology NAS. When I connect via the client at home to the server, everything works for.
I know you can read packets in Wireshark. If I ...
2
votes
1answer
923 views
How to generate an OpenVPN 4096 or 8192 bit static key?
How to create an OpenVPN static / pre-shared key with key size 4096 or 8192 bit?
openvpn --genkey
Creates 2048 bit strong keys only.
Static key. Not CA.
1
vote
1answer
444 views
How can I hide my mac address when using a public wifi? [duplicate]
As a new student of cyber security, I have started to see in real-time how an individual can actually scan and view the mac addresses on a public wifi connection.
How can I hide my mac address when ...
-4
votes
1answer
604 views
Wireguard vs. OpenVPN [closed]
Which is better in what scenario?
What cons and pros do they have? (optional question)
Which is more secure? (optional question)
Best use case of each one?
Isn't WireGuard based on OpenVPN?
1
vote
1answer
618 views
Tunnel Openvpn traffic through ssh?
I know similar question have been asked but none of them are explained thoroughly.
I have setup a VPS and setup openvpn using https://github.com/Nyr/openvpn-install on tcp and port 443(I have access ...
1
vote
1answer
88 views
If I use a VPN, can an enterprise proxy insert itself in the middle?
I'm using the guest Wi-Fi at a large corporation, and connecting to a commercial VPN provider via the OpenVPN client. I do not know one way or another if a proxy is used on the guest wi-fi, but I ...
0
votes
1answer
485 views
For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?
Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables?
Assuming my public ip is known (and I don't want to change it), would it provide complete ...
2
votes
1answer
3k views
how to force openvpn client to use TLS instead of SSL connection [duplicate]
i'm trying to use openvpn client to connect TLS VPN server
here is my .ovpn file
client
tls-client
dev tun
proto tcp
remote example.com 443
resolv-retry infinite
auth-user-pass
persist-key
...
0
votes
1answer
194 views
Is it safe to use RPC with sensitive data through an encrypted VPN connection instead of SSL/TLS?
I have an application where there I'm planning the following setup:
user <-----------------> layer 1 server <------------------> backend server
internet (https) ...
0
votes
1answer
514 views
What's the drawback of enabling auth-nocache in OpenVPN?
Using a "default" configuration, OpenVPN clients show the following warning when connecting to a VPN server in red, attention-seeking letters:
WARNING: this configuration may cache passwords in ...
3
votes
2answers
3k views
What are the risks of installing a CA on the same machine as OpenVPN server?
Digital Ocean states in one of it's tutorial about OpenVPN server :
While it’s technically possible to use your OpenVPN server or your
local machine as your CA, this is not recommended as it ...
2
votes
1answer
410 views
Meterpreter and OpenVPN
During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example:
I have a payload. Whenever that payload runs on the ...
0
votes
1answer
1k views
Are ARP attacks possible on OpenVPN and Wireguard connections?
I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & ...
2
votes
0answers
99 views
Loosing internet connection while connected to specific VPN server?
I have noticed a strange behaviour earlier today on my VPN on a specific server.
When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
1
vote
1answer
161 views
Is my VPN leaking or is this normal?
Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192.....
When I connect to my VPN and do a route print I get ...
0
votes
0answers
658 views
Filter/Block OpenVPN clients' access to a specific website
As stated in the title I would like to restrict VPN clients' access to specific websites.
More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
