Questions tagged [openvpn]
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
0
votes
0answers
24 views
VPN Kill switch doesn't work with Tor Traffic [migrated]
Always, when I try to run kill switch for VPN my Tor Browser stops working and I am not sure why it happened. I am not good in firewalls and port forwarding but I would like to learn.
I have ...
1
vote
2answers
62 views
What are the risks of installing a CA on the same machine as OpenVPN server?
Digital Ocean states in one of it's tutorial about OpenVPN server :
While it’s technically possible to use your OpenVPN server or your
local machine as your CA, this is not recommended as it ...
1
vote
0answers
53 views
Nord VPN is keeping local logs, how to automate log purging? [migrated]
I have found that Nord VPN is keeping detailed logs on its user's computers.
It stores them in: C:\Users\UserName\AppData\Local\NordVPN\logs
I spoke with Nord support and they told me their is no ...
2
votes
1answer
36 views
Meterpreter and OpenVPN
During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example:
I have a payload. Whenever that payload runs on the ...
0
votes
1answer
38 views
Are ARP attacks possible on OpenVPN and Wireguard connections?
I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & ...
0
votes
0answers
16 views
`tls-crypt unwrap error: packet authentication failed` connection error for OpenVPN Server [migrated]
• I am unable to set up the VPN server on my host, using OpenVPN, specifically, when connecting to the server, the connection is failing with an error tls-crypt unwrap error: packet authentication ...
1
vote
0answers
55 views
Loosing internet connection while connected to specific VPN server?
I have noticed a strange behaviour earlier today on my VPN on a specific server.
When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
1
vote
1answer
117 views
Is my VPN leaking or is this normal?
Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192.....
When I connect to my VPN and do a route print I get ...
0
votes
0answers
29 views
Is it possible to direct traffic first to my OS firewall and then to a full tunnel VPN?
I have rules on windows firewall for specific programs that I don't want communicating.
I use windscribe's openvpn for perceived anonymity, but more importantly I want the firewall rules followed.
...
0
votes
0answers
68 views
What is a reasonable default_crl_days value for OpenVPN CLR? Why?
I am having trouble finding a definitive answer (with a rationale) on what a reasonable default value for default_crl_days (in openssl.cnf) for use with OpenVPN.
The current default is 30 days. But ...
0
votes
0answers
73 views
Filter/Block OpenVPN clients' access to a specific website
As stated in the title I would like to restrict VPN clients' access to specific websites.
More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
1
vote
3answers
144 views
Using a VPN for privacy?
Say I am only using a vpn for privacy (as is recommended by many people, especially on public wifi etc). How I understand it is that many people are using the same servers and have the same ip online.
...
0
votes
0answers
33 views
Anyway of finding connected devices on a vpn router from the VPN server itself?
I've setup my own OpenVpn server on AWS using an EC2 instance and I have a router with OpenWRT configured to connect to the VPN Server.
Now, I want to have some EC2 running network scans such as NMAP ...
0
votes
1answer
157 views
Why is my VPN behaving like this and should I be concerned?
I recently started using NordVPN and have noticed something strange.
Sometimes when I connect to the VPN service in my system tray it will show a wifi connection and other times an ethernet ...
-1
votes
1answer
104 views
Is Private Internet Access (PIA) VPN safe to use? [closed]
As said in the PIA website they pretend to have the following VPN features:
PPTP, OpenVPN and L2TP/IPSec
SOCKS5 Proxy Included
No traffic logs
So my question are: Is Private Internet Access VPN ...
3
votes
5answers
309 views
Difference between SSH Tunnel / Proxy and VPN in terms of security
What benefits does a VPN have over just using a regular SSH Tunnel?
I'm considering setting up OpenVPN on a server, but was wondering what benefits that would have over just using that same server as ...
0
votes
3answers
132 views
Does a self-hosted VPN (openvpn) at home encrypt traffic for my ISP? [duplicate]
Title says it all.
If I host my own VPN at home (using openvpn), and connect my devices to it, will my ISP be able to see the contents of my traffic?
2
votes
1answer
116 views
Can a VPN server be traced through Tor?
I was wondering that if my data was intercepted by Tor by an exit node, would they be able to see which VPN server is being used to encrypt the data.
I am asking because I planned on making an OpenVPN ...
0
votes
2answers
271 views
How does Netflix tell I'm behind a vpn managed with OpenVPN but not other managers?
I run Ubuntu 18.04 and use a VPN service. If I use OpenVPN to manage the connection and connect to a given server, then I can browse the internet as if I'm from that location, except for Netflix, ...
0
votes
1answer
180 views
watch DNS queries while using OpenVPN.-
I want to monitor/sniff the DNS queries I make while I'm using a VPN connection with my OpenVPN client.
My initial motivation was to check if I'm leaking DNS queries; then using this page it seems I'm ...
2
votes
1answer
73 views
OpenVPN configuration and ISP's DNS
I have configured OpenVPN server for using Clouflare DNS - 1.1.1.1. I use OpenVPN connection in the next way: sudo openvpn --config Config.ovpn on my local machine in WiFi network.
My ISP provider ...
1
vote
1answer
57 views
OpenVPN one account multiple servers & Load Balancing
I have recently been experimenting with OpenVPN. My aim is to create a group of servers in different locations with a single username and password for each user stored in a central database. For ...
7
votes
1answer
2k views
Can personal VPN help protecting my behavior on the company laptop?
Update:
I don't care if the company knows I'm using a private VPN (this is allowed and confirmed with the IT department). My only concern is if the company knows I visited nba.com (for example).
On ...
0
votes
1answer
202 views
Limit OpenVPN client certificate to specific VPN with shared CA chain
I've created a private x509 pki structure with openssl that consists of a self signed Root CA, an Intermediate CA and two Signing CA's. The signing CA's are used to separate the signing of ...
2
votes
1answer
52 views
OpenVPN client can still connect to the server after client's tls-auth key has changed
I'm currently getting familiar with OpenVPN by building and testing some client–server infrastructure using VMware workstation.
This is what I've recently noticed: if you manually change some values ...
1
vote
1answer
312 views
What are the possible solution for blocking VPN connection on a home network?
I am not a techie. I am just wanting to force some parentral control using OPENDNS. Opendns works fine however it is easily broken on android or windows using vpn software like ultrasurf or latern or ...
1
vote
0answers
582 views
OpenVPN use auth-user-pass with a file and authenticator
I have an open vpn configuration with the lines
auth-user-pass my-login-creds.conf
static-challenge "Enter Google Authenticator Code" 1
in it. When I try to connect with openvpn my-config.ovpn I ...
1
vote
0answers
308 views
How to auto renew OpenVPN client certificates using easyRSA
I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
163 views
Differentiating between IKEv2 and OpenVPN Traffic
There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
1
vote
1answer
612 views
Wireguard: Is it suitable for road-warrior scenarios?
Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
0
votes
1answer
575 views
OpenVPN using google authenticator
I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
4
votes
1answer
708 views
Is it possible to detect VPN in the network?
Is it possible to detect the use of a VPN in a network?
Let's say that I'm going to use a VPN during my connection in a country where internet is filtered, and to avoid been monitored I installed ...
1
vote
1answer
119 views
Is iptables and vpn tunneling enough? [closed]
What is the best approach to secure connection between two devices over the internet (public IP)?
if there is a firewall on my public IP address deny access all incoming connection, can the hacker ...
0
votes
0answers
66 views
What are the dangers of a compromised private key in “pass + certificate” VPN auth?
A VPN service I've encountered supports connecting to it with NetworkManager in linux. The options are OpenVPN as the connection type, with Password with Certificates (TLS) as authentication type.
...
6
votes
3answers
700 views
Safe to commit OpenVPN client config to Git?
I'd like to commit my OpenVPN client config to version control, in a repo that's remotely hosted and publicly accessible.
This would reveal the server's hostname and port, as well as the filepaths to ...
0
votes
1answer
601 views
OpenVPN Encryption Algorithm Used For Control Channel Encryption
In OpenVPN which algorithm is used for control channel encryption (--tls-crypt directive in OVPN profile)?
By using --tls-crypt, will there be only encryption or authentication-then-encryption? I ...
0
votes
1answer
131 views
Is there any advantage to using encrypted DNS on a VPN server
I have a personal OpenVPN server. I am worried that the fact the DNS resolution coming out of the server isn't encrypted, since I am the only one that uses the server at the moment, attribution isn't ...
1
vote
2answers
3k views
Connecting to my VPN via IP or domain name?
Background:
So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
1
vote
1answer
187 views
Is it possible to run Responder and/or Layer 2 ARP Poisoning over OpenVPN or an OpenVPN Ethernet Bridge?
Situation: We usually perform penetration tests from Linux machines connected to the clients local network. However for this test the client wants the start point to be a windows machine and has thus ...
0
votes
2answers
157 views
OpenVPN Traffic Capture
Forgive me if this is not the appropriate place to ask this.
I was capturing some traffic on my home server during an active OpenVPN session using Mullvad recently and I noticed that the traffic is ...
1
vote
1answer
4k views
OpenVPN kill switch on Linux [closed]
How to prevent IP leak on Linux when OpenVPN fails to connect to the server while I am surfing on the net?
I read about kill switch, but after some internet searches I found out that is not ...
0
votes
1answer
123 views
VPN Shared IP and wrongful attribution of traffic correlation of the encrypted packets by Feds/LEA
I use Pia, arguably one of the most popular paid VPN's on the market today. Imagine this HYPOTHETICAL scenario.
I stay on the East coast, and i use my virtual IP location as the VPN's Datacenter in ...
2
votes
1answer
128 views
Appearance of yam bitcoin miner
I had a VM based on Ubuntu 16.04.03 and the only package added to it was OpenVPN. The purpose of it was to provide a VPN into my private network sited within the cloud environment. The hypervisor ...
5
votes
1answer
2k views
How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?
The problem is : Nothing prevents the user to copy the certficate/key on a different hardware device and use it from a different hardware device...
Is it possible to generate a really unique ...
1
vote
1answer
122 views
SSH Proxy vs VPN Killswitch
This might be complete nonsense but I've heard people talking about so I'm interested to see if it's valid: I've heard people saying that SOCKS and SSH are more secure/private than a VPN because they ...
0
votes
2answers
305 views
VPN profile working in Iphone
I am using a VPN on my iphone https://itunes.apple.com/us/app/hotspot-vpn-free-secure-fast-internet/id1121846465?mt=8
Their privacy policy states that they can get data but doesn't says that will ...
1
vote
0answers
686 views
VPN connection through VPN connection using Virtual Machine
I read online that there is such thing as DoubleVPN what basically means
PC -> vpn1 -> vpn2 -> internet
However, its stated here:
https://www.bestvpn.com/privacy-news/chaining-vpn-servers-double-...
2
votes
1answer
615 views
Are VPNs that expose device ID a security risk?
This is the first time I am using a VPN on my stock Android device. I bought VPN Unlimited mainly because it was on sale and without evaluating competitor products
I was playing around with it and it ...
2
votes
2answers
1k views
Is it safe to provide others with a VPN server at home?
I'm trying to set up a VPN server on a Raspberry Pi at home to help some friends who live in a country where internet is severely filtered. So far I have found OpenVPN and PiVPN for this pourpose. ...
1
vote
2answers
121 views
Best alternative for monitoring traffic safely?
I need to monitor internet traffic from some smartphones (they want me to monitor them), and I am trying to determine what would be the best setup for my requirements.
I was thinking that what I need ...
