Questions tagged [openvpn]
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
187
questions
0
votes
0answers
26 views
OpenVPN Access Server - Split tunnel to selected users [migrated]
Not sure if this is the right platform to ask. Here is my question:
I have OpenVPN Access Server 2.6.1 currently configured with split tunnelling and its working fine. I have two VPN users, X and Y. ...
0
votes
1answer
62 views
For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?
Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables?
Assuming my public ip is known (and I don't want to change it), would it provide complete ...
0
votes
1answer
144 views
how to force openvpn client to use TLS instead of SSL connection [duplicate]
i'm trying to use openvpn client to connect TLS VPN server
here is my .ovpn file
client
tls-client
dev tun
proto tcp
remote example.com 443
resolv-retry infinite
auth-user-pass
persist-key
...
0
votes
1answer
56 views
Is it safe to use RPC with sensitive data through an encrypted VPN connection instead of SSL/TLS?
I have an application where there I'm planning the following setup:
user <-----------------> layer 1 server <------------------> backend server
internet (https) ...
0
votes
1answer
45 views
What's the drawback of enabling auth-nocache in OpenVPN?
Using a "default" configuration, OpenVPN clients show the following warning when connecting to a VPN server in red, attention-seeking letters:
WARNING: this configuration may cache passwords in ...
2
votes
2answers
210 views
What are the risks of installing a CA on the same machine as OpenVPN server?
Digital Ocean states in one of it's tutorial about OpenVPN server :
While it’s technically possible to use your OpenVPN server or your
local machine as your CA, this is not recommended as it ...
2
votes
1answer
82 views
Meterpreter and OpenVPN
During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example:
I have a payload. Whenever that payload runs on the ...
0
votes
1answer
178 views
Are ARP attacks possible on OpenVPN and Wireguard connections?
I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & ...
2
votes
0answers
89 views
Loosing internet connection while connected to specific VPN server?
I have noticed a strange behaviour earlier today on my VPN on a specific server.
When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
1
vote
1answer
126 views
Is my VPN leaking or is this normal?
Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192.....
When I connect to my VPN and do a route print I get ...
0
votes
0answers
31 views
Is it possible to direct traffic first to my OS firewall and then to a full tunnel VPN?
I have rules on windows firewall for specific programs that I don't want communicating.
I use windscribe's openvpn for perceived anonymity, but more importantly I want the firewall rules followed.
...
0
votes
0answers
214 views
What is a reasonable default_crl_days value for OpenVPN CLR? Why?
I am having trouble finding a definitive answer (with a rationale) on what a reasonable default value for default_crl_days (in openssl.cnf) for use with OpenVPN.
The current default is 30 days. But ...
0
votes
0answers
100 views
Filter/Block OpenVPN clients' access to a specific website
As stated in the title I would like to restrict VPN clients' access to specific websites.
More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
1
vote
3answers
172 views
Using a VPN for privacy?
Say I am only using a vpn for privacy (as is recommended by many people, especially on public wifi etc). How I understand it is that many people are using the same servers and have the same ip online.
...
0
votes
0answers
35 views
Anyway of finding connected devices on a vpn router from the VPN server itself?
I've setup my own OpenVpn server on AWS using an EC2 instance and I have a router with OpenWRT configured to connect to the VPN Server.
Now, I want to have some EC2 running network scans such as NMAP ...
1
vote
1answer
289 views
Why is my VPN behaving like this and should I be concerned?
I recently started using NordVPN and have noticed something strange.
Sometimes when I connect to the VPN service in my system tray it will show a wifi connection and other times an ethernet ...
-1
votes
1answer
226 views
Is Private Internet Access (PIA) VPN safe to use? [closed]
As said in the PIA website they pretend to have the following VPN features:
PPTP, OpenVPN and L2TP/IPSec
SOCKS5 Proxy Included
No traffic logs
So my question are: Is Private Internet Access VPN ...
4
votes
5answers
905 views
Difference between SSH Tunnel / Proxy and VPN in terms of security
What benefits does a VPN have over just using a regular SSH Tunnel?
I'm considering setting up OpenVPN on a server, but was wondering what benefits that would have over just using that same server as ...
0
votes
3answers
333 views
Does a self-hosted VPN (openvpn) at home encrypt traffic for my ISP? [duplicate]
Title says it all.
If I host my own VPN at home (using openvpn), and connect my devices to it, will my ISP be able to see the contents of my traffic?
2
votes
1answer
176 views
Can a VPN server be traced through Tor?
I was wondering that if my data was intercepted by Tor by an exit node, would they be able to see which VPN server is being used to encrypt the data.
I am asking because I planned on making an OpenVPN ...
1
vote
2answers
614 views
How does Netflix tell I'm behind a vpn managed with OpenVPN but not other managers?
I run Ubuntu 18.04 and use a VPN service. If I use OpenVPN to manage the connection and connect to a given server, then I can browse the internet as if I'm from that location, except for Netflix, ...
0
votes
1answer
284 views
watch DNS queries while using OpenVPN.-
I want to monitor/sniff the DNS queries I make while I'm using a VPN connection with my OpenVPN client.
My initial motivation was to check if I'm leaking DNS queries; then using this page it seems I'm ...
2
votes
1answer
96 views
OpenVPN configuration and ISP's DNS
I have configured OpenVPN server for using Clouflare DNS - 1.1.1.1. I use OpenVPN connection in the next way: sudo openvpn --config Config.ovpn on my local machine in WiFi network.
My ISP provider ...
1
vote
1answer
166 views
OpenVPN one account multiple servers & Load Balancing
I have recently been experimenting with OpenVPN. My aim is to create a group of servers in different locations with a single username and password for each user stored in a central database. For ...
7
votes
1answer
2k views
Can personal VPN help protecting my behavior on the company laptop?
Update:
I don't care if the company knows I'm using a private VPN (this is allowed and confirmed with the IT department). My only concern is if the company knows I visited nba.com (for example).
On ...
0
votes
1answer
391 views
Limit OpenVPN client certificate to specific VPN with shared CA chain
I've created a private x509 pki structure with openssl that consists of a self signed Root CA, an Intermediate CA and two Signing CA's. The signing CA's are used to separate the signing of ...
2
votes
1answer
101 views
OpenVPN client can still connect to the server after client's tls-auth key has changed
I'm currently getting familiar with OpenVPN by building and testing some client–server infrastructure using VMware workstation.
This is what I've recently noticed: if you manually change some values ...
1
vote
1answer
629 views
What are the possible solution for blocking VPN connection on a home network?
I am not a techie. I am just wanting to force some parentral control using OPENDNS. Opendns works fine however it is easily broken on android or windows using vpn software like ultrasurf or latern or ...
1
vote
0answers
678 views
OpenVPN use auth-user-pass with a file and authenticator
I have an open vpn configuration with the lines
auth-user-pass my-login-creds.conf
static-challenge "Enter Google Authenticator Code" 1
in it. When I try to connect with openvpn my-config.ovpn I ...
1
vote
0answers
464 views
How to auto renew OpenVPN client certificates using easyRSA
I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
270 views
Differentiating between IKEv2 and OpenVPN Traffic
There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
1
vote
1answer
761 views
Wireguard: Is it suitable for road-warrior scenarios?
Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
1
vote
1answer
1k views
OpenVPN using google authenticator
I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
4
votes
1answer
1k views
Is it possible to detect VPN in the network?
Is it possible to detect the use of a VPN in a network?
Let's say that I'm going to use a VPN during my connection in a country where internet is filtered, and to avoid been monitored I installed ...
1
vote
1answer
133 views
Is iptables and vpn tunneling enough? [closed]
What is the best approach to secure connection between two devices over the internet (public IP)?
if there is a firewall on my public IP address deny access all incoming connection, can the hacker ...
6
votes
3answers
717 views
Safe to commit OpenVPN client config to Git?
I'd like to commit my OpenVPN client config to version control, in a repo that's remotely hosted and publicly accessible.
This would reveal the server's hostname and port, as well as the filepaths to ...
0
votes
1answer
755 views
OpenVPN Encryption Algorithm Used For Control Channel Encryption
In OpenVPN which algorithm is used for control channel encryption (--tls-crypt directive in OVPN profile)?
By using --tls-crypt, will there be only encryption or authentication-then-encryption? I ...
0
votes
1answer
188 views
Is there any advantage to using encrypted DNS on a VPN server
I have a personal OpenVPN server. I am worried that the fact the DNS resolution coming out of the server isn't encrypted, since I am the only one that uses the server at the moment, attribution isn't ...
2
votes
2answers
4k views
Connecting to my VPN via IP or domain name?
Background:
So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
1
vote
1answer
302 views
Is it possible to run Responder and/or Layer 2 ARP Poisoning over OpenVPN or an OpenVPN Ethernet Bridge?
Situation: We usually perform penetration tests from Linux machines connected to the clients local network. However for this test the client wants the start point to be a windows machine and has thus ...
0
votes
2answers
220 views
OpenVPN Traffic Capture
Forgive me if this is not the appropriate place to ask this.
I was capturing some traffic on my home server during an active OpenVPN session using Mullvad recently and I noticed that the traffic is ...
1
vote
1answer
7k views
OpenVPN kill switch on Linux [closed]
How to prevent IP leak on Linux when OpenVPN fails to connect to the server while I am surfing on the net?
I read about kill switch, but after some internet searches I found out that is not ...
0
votes
1answer
139 views
VPN Shared IP and wrongful attribution of traffic correlation of the encrypted packets by Feds/LEA
I use Pia, arguably one of the most popular paid VPN's on the market today. Imagine this HYPOTHETICAL scenario.
I stay on the East coast, and i use my virtual IP location as the VPN's Datacenter in ...
2
votes
1answer
138 views
Appearance of yam bitcoin miner
I had a VM based on Ubuntu 16.04.03 and the only package added to it was OpenVPN. The purpose of it was to provide a VPN into my private network sited within the cloud environment. The hypervisor ...
6
votes
1answer
2k views
How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?
The problem is : Nothing prevents the user to copy the certficate/key on a different hardware device and use it from a different hardware device...
Is it possible to generate a really unique ...
1
vote
1answer
143 views
SSH Proxy vs VPN Killswitch
This might be complete nonsense but I've heard people talking about so I'm interested to see if it's valid: I've heard people saying that SOCKS and SSH are more secure/private than a VPN because they ...
0
votes
2answers
370 views
VPN profile working in Iphone
I am using a VPN on my iphone https://itunes.apple.com/us/app/hotspot-vpn-free-secure-fast-internet/id1121846465?mt=8
Their privacy policy states that they can get data but doesn't says that will ...
1
vote
0answers
828 views
VPN connection through VPN connection using Virtual Machine
I read online that there is such thing as DoubleVPN what basically means
PC -> vpn1 -> vpn2 -> internet
However, its stated here:
https://www.bestvpn.com/privacy-news/chaining-vpn-servers-double-...
2
votes
1answer
825 views
Are VPNs that expose device ID a security risk?
This is the first time I am using a VPN on my stock Android device. I bought VPN Unlimited mainly because it was on sale and without evaluating competitor products
I was playing around with it and it ...
2
votes
2answers
2k views
Is it safe to provide others with a VPN server at home?
I'm trying to set up a VPN server on a Raspberry Pi at home to help some friends who live in a country where internet is severely filtered. So far I have found OpenVPN and PiVPN for this pourpose. ...
