Questions tagged [openvpn]
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
191
questions
-4
votes
1answer
71 views
Wireguard vs. OpenVPN [closed]
Which is better in what scenario?
What cons and pros do they have? (optional question)
Which is more secure? (optional question)
Best use case of each one?
Isn't WireGuard based on OpenVPN?
1
vote
1answer
36 views
Tunnel Openvpn traffic through ssh?
I know similar question have been asked but none of them are explained thoroughly.
I have setup a VPS and setup openvpn using https://github.com/Nyr/openvpn-install on tcp and port 443(I have access ...
1
vote
0answers
19 views
OpenVPN drops connection about once a day, logs indicate DNS failure [migrated]
I have an old version of pfSense (2.3.2) running an OpenVPN client to a commercial server. Over the past few years, the OpenVPN connection has been dropping more frequently, and now it's about once ...
1
vote
1answer
64 views
If I use a VPN, can an enterprise proxy insert itself in the middle?
I'm using the guest Wi-Fi at a large corporation, and connecting to a commercial VPN provider via the OpenVPN client. I do not know one way or another if a proxy is used on the guest wi-fi, but I ...
2
votes
0answers
57 views
OpenVPN: Allow specific clients to reach only a specific LAN behind the OpenVPN-Server [migrated]
I have an OpenVPN server running on an Ubuntu 18.04 machine and various OpenVPN clients connecting to that server. Some of those clients are routers, each of which has a 192.168.0.0/24 LAN behind it. ...
0
votes
1answer
117 views
For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?
Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables?
Assuming my public ip is known (and I don't want to change it), would it provide complete ...
0
votes
1answer
408 views
how to force openvpn client to use TLS instead of SSL connection [duplicate]
i'm trying to use openvpn client to connect TLS VPN server
here is my .ovpn file
client
tls-client
dev tun
proto tcp
remote example.com 443
resolv-retry infinite
auth-user-pass
persist-key
...
0
votes
1answer
76 views
Is it safe to use RPC with sensitive data through an encrypted VPN connection instead of SSL/TLS?
I have an application where there I'm planning the following setup:
user <-----------------> layer 1 server <------------------> backend server
internet (https) ...
0
votes
1answer
65 views
What's the drawback of enabling auth-nocache in OpenVPN?
Using a "default" configuration, OpenVPN clients show the following warning when connecting to a VPN server in red, attention-seeking letters:
WARNING: this configuration may cache passwords in ...
2
votes
2answers
426 views
What are the risks of installing a CA on the same machine as OpenVPN server?
Digital Ocean states in one of it's tutorial about OpenVPN server :
While it’s technically possible to use your OpenVPN server or your
local machine as your CA, this is not recommended as it ...
2
votes
1answer
141 views
Meterpreter and OpenVPN
During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example:
I have a payload. Whenever that payload runs on the ...
0
votes
1answer
302 views
Are ARP attacks possible on OpenVPN and Wireguard connections?
I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & ...
2
votes
0answers
91 views
Loosing internet connection while connected to specific VPN server?
I have noticed a strange behaviour earlier today on my VPN on a specific server.
When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
1
vote
1answer
131 views
Is my VPN leaking or is this normal?
Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192.....
When I connect to my VPN and do a route print I get ...
0
votes
0answers
31 views
Is it possible to direct traffic first to my OS firewall and then to a full tunnel VPN?
I have rules on windows firewall for specific programs that I don't want communicating.
I use windscribe's openvpn for perceived anonymity, but more importantly I want the firewall rules followed.
...
0
votes
0answers
340 views
What is a reasonable default_crl_days value for OpenVPN CLR? Why?
I am having trouble finding a definitive answer (with a rationale) on what a reasonable default value for default_crl_days (in openssl.cnf) for use with OpenVPN.
The current default is 30 days. But ...
0
votes
0answers
149 views
Filter/Block OpenVPN clients' access to a specific website
As stated in the title I would like to restrict VPN clients' access to specific websites.
More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
1
vote
3answers
184 views
Using a VPN for privacy?
Say I am only using a vpn for privacy (as is recommended by many people, especially on public wifi etc). How I understand it is that many people are using the same servers and have the same ip online.
...
0
votes
0answers
38 views
Anyway of finding connected devices on a vpn router from the VPN server itself?
I've setup my own OpenVpn server on AWS using an EC2 instance and I have a router with OpenWRT configured to connect to the VPN Server.
Now, I want to have some EC2 running network scans such as NMAP ...
1
vote
1answer
481 views
Why is my VPN behaving like this and should I be concerned?
I recently started using NordVPN and have noticed something strange.
Sometimes when I connect to the VPN service in my system tray it will show a wifi connection and other times an ethernet ...
-1
votes
1answer
309 views
Is Private Internet Access (PIA) VPN safe to use? [closed]
As said in the PIA website they pretend to have the following VPN features:
PPTP, OpenVPN and L2TP/IPSec
SOCKS5 Proxy Included
No traffic logs
So my question are: Is Private Internet Access VPN ...
5
votes
5answers
1k views
Difference between SSH Tunnel / Proxy and VPN in terms of security
What benefits does a VPN have over just using a regular SSH Tunnel?
I'm considering setting up OpenVPN on a server, but was wondering what benefits that would have over just using that same server as ...
0
votes
3answers
464 views
Does a self-hosted VPN (openvpn) at home encrypt traffic for my ISP? [duplicate]
Title says it all.
If I host my own VPN at home (using openvpn), and connect my devices to it, will my ISP be able to see the contents of my traffic?
2
votes
1answer
198 views
Can a VPN server be traced through Tor?
I was wondering that if my data was intercepted by Tor by an exit node, would they be able to see which VPN server is being used to encrypt the data.
I am asking because I planned on making an OpenVPN ...
1
vote
2answers
959 views
How does Netflix tell I'm behind a vpn managed with OpenVPN but not other managers?
I run Ubuntu 18.04 and use a VPN service. If I use OpenVPN to manage the connection and connect to a given server, then I can browse the internet as if I'm from that location, except for Netflix, ...
0
votes
1answer
358 views
watch DNS queries while using OpenVPN.-
I want to monitor/sniff the DNS queries I make while I'm using a VPN connection with my OpenVPN client.
My initial motivation was to check if I'm leaking DNS queries; then using this page it seems I'm ...
2
votes
1answer
124 views
OpenVPN configuration and ISP's DNS
I have configured OpenVPN server for using Clouflare DNS - 1.1.1.1. I use OpenVPN connection in the next way: sudo openvpn --config Config.ovpn on my local machine in WiFi network.
My ISP provider ...
1
vote
1answer
277 views
OpenVPN one account multiple servers & Load Balancing
I have recently been experimenting with OpenVPN. My aim is to create a group of servers in different locations with a single username and password for each user stored in a central database. For ...
7
votes
1answer
2k views
Can personal VPN help protecting my behavior on the company laptop?
Update:
I don't care if the company knows I'm using a private VPN (this is allowed and confirmed with the IT department). My only concern is if the company knows I visited nba.com (for example).
On ...
0
votes
1answer
439 views
Limit OpenVPN client certificate to specific VPN with shared CA chain
I've created a private x509 pki structure with openssl that consists of a self signed Root CA, an Intermediate CA and two Signing CA's. The signing CA's are used to separate the signing of ...
2
votes
1answer
143 views
OpenVPN client can still connect to the server after client's tls-auth key has changed
I'm currently getting familiar with OpenVPN by building and testing some client–server infrastructure using VMware workstation.
This is what I've recently noticed: if you manually change some values ...
1
vote
1answer
781 views
What are the possible solution for blocking VPN connection on a home network?
I am not a techie. I am just wanting to force some parentral control using OPENDNS. Opendns works fine however it is easily broken on android or windows using vpn software like ultrasurf or latern or ...
1
vote
0answers
717 views
OpenVPN use auth-user-pass with a file and authenticator
I have an open vpn configuration with the lines
auth-user-pass my-login-creds.conf
static-challenge "Enter Google Authenticator Code" 1
in it. When I try to connect with openvpn my-config.ovpn I ...
1
vote
0answers
580 views
How to auto renew OpenVPN client certificates using easyRSA
I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
316 views
Differentiating between IKEv2 and OpenVPN Traffic
There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
1
vote
1answer
851 views
Wireguard: Is it suitable for road-warrior scenarios?
Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
1
vote
1answer
2k views
OpenVPN using google authenticator
I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
4
votes
1answer
1k views
Is it possible to detect VPN in the network?
Is it possible to detect the use of a VPN in a network?
Let's say that I'm going to use a VPN during my connection in a country where internet is filtered, and to avoid been monitored I installed ...
1
vote
1answer
141 views
Is iptables and vpn tunneling enough? [closed]
What is the best approach to secure connection between two devices over the internet (public IP)?
if there is a firewall on my public IP address deny access all incoming connection, can the hacker ...
6
votes
3answers
728 views
Safe to commit OpenVPN client config to Git?
I'd like to commit my OpenVPN client config to version control, in a repo that's remotely hosted and publicly accessible.
This would reveal the server's hostname and port, as well as the filepaths to ...
0
votes
1answer
872 views
OpenVPN Encryption Algorithm Used For Control Channel Encryption
In OpenVPN which algorithm is used for control channel encryption (--tls-crypt directive in OVPN profile)?
By using --tls-crypt, will there be only encryption or authentication-then-encryption? I ...
0
votes
1answer
223 views
Is there any advantage to using encrypted DNS on a VPN server
I have a personal OpenVPN server. I am worried that the fact the DNS resolution coming out of the server isn't encrypted, since I am the only one that uses the server at the moment, attribution isn't ...
2
votes
2answers
5k views
Connecting to my VPN via IP or domain name?
Background:
So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
1
vote
1answer
366 views
Is it possible to run Responder and/or Layer 2 ARP Poisoning over OpenVPN or an OpenVPN Ethernet Bridge?
Situation: We usually perform penetration tests from Linux machines connected to the clients local network. However for this test the client wants the start point to be a windows machine and has thus ...
0
votes
2answers
248 views
OpenVPN Traffic Capture
Forgive me if this is not the appropriate place to ask this.
I was capturing some traffic on my home server during an active OpenVPN session using Mullvad recently and I noticed that the traffic is ...
2
votes
1answer
8k views
OpenVPN kill switch on Linux [closed]
How to prevent IP leak on Linux when OpenVPN fails to connect to the server while I am surfing on the net?
I read about kill switch, but after some internet searches I found out that is not ...
0
votes
1answer
148 views
VPN Shared IP and wrongful attribution of traffic correlation of the encrypted packets by Feds/LEA
I use Pia, arguably one of the most popular paid VPN's on the market today. Imagine this HYPOTHETICAL scenario.
I stay on the East coast, and i use my virtual IP location as the VPN's Datacenter in ...
2
votes
1answer
146 views
Appearance of yam bitcoin miner
I had a VM based on Ubuntu 16.04.03 and the only package added to it was OpenVPN. The purpose of it was to provide a VPN into my private network sited within the cloud environment. The hypervisor ...
6
votes
1answer
3k views
How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?
The problem is : Nothing prevents the user to copy the certficate/key on a different hardware device and use it from a different hardware device...
Is it possible to generate a really unique ...
1
vote
1answer
152 views
SSH Proxy vs VPN Killswitch
This might be complete nonsense but I've heard people talking about so I'm interested to see if it's valid: I've heard people saying that SOCKS and SSH are more secure/private than a VPN because they ...
