Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openvpn]

An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).

0
votes
0answers
24 views

VPN Kill switch doesn't work with Tor Traffic [migrated]

Always, when I try to run kill switch for VPN my Tor Browser stops working and I am not sure why it happened. I am not good in firewalls and port forwarding but I would like to learn. I have ...
1
vote
2answers
62 views

What are the risks of installing a CA on the same machine as OpenVPN server?

Digital Ocean states in one of it's tutorial about OpenVPN server : While it’s technically possible to use your OpenVPN server or your local machine as your CA, this is not recommended as it ...
1
vote
0answers
53 views

Nord VPN is keeping local logs, how to automate log purging? [migrated]

I have found that Nord VPN is keeping detailed logs on its user's computers. It stores them in: C:\Users\UserName\AppData\Local\NordVPN\logs I spoke with Nord support and they told me their is no ...
2
votes
1answer
36 views

Meterpreter and OpenVPN

During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example: I have a payload. Whenever that payload runs on the ...
0
votes
1answer
38 views

Are ARP attacks possible on OpenVPN and Wireguard connections?

I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & ...
0
votes
0answers
16 views

`tls-crypt unwrap error: packet authentication failed` connection error for OpenVPN Server [migrated]

• I am unable to set up the VPN server on my host, using OpenVPN, specifically, when connecting to the server, the connection is failing with an error tls-crypt unwrap error: packet authentication ...
1
vote
0answers
55 views

Loosing internet connection while connected to specific VPN server?

I have noticed a strange behaviour earlier today on my VPN on a specific server. When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
1
vote
1answer
117 views

Is my VPN leaking or is this normal?

Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192..... When I connect to my VPN and do a route print I get ...
0
votes
0answers
29 views

Is it possible to direct traffic first to my OS firewall and then to a full tunnel VPN?

I have rules on windows firewall for specific programs that I don't want communicating. I use windscribe's openvpn for perceived anonymity, but more importantly I want the firewall rules followed. ...
0
votes
0answers
68 views

What is a reasonable default_crl_days value for OpenVPN CLR? Why?

I am having trouble finding a definitive answer (with a rationale) on what a reasonable default value for default_crl_days (in openssl.cnf) for use with OpenVPN. The current default is 30 days. But ...
0
votes
0answers
73 views

Filter/Block OpenVPN clients' access to a specific website

As stated in the title I would like to restrict VPN clients' access to specific websites. More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
1
vote
3answers
144 views

Using a VPN for privacy?

Say I am only using a vpn for privacy (as is recommended by many people, especially on public wifi etc). How I understand it is that many people are using the same servers and have the same ip online. ...
0
votes
0answers
33 views

Anyway of finding connected devices on a vpn router from the VPN server itself?

I've setup my own OpenVpn server on AWS using an EC2 instance and I have a router with OpenWRT configured to connect to the VPN Server. Now, I want to have some EC2 running network scans such as NMAP ...
0
votes
1answer
157 views

Why is my VPN behaving like this and should I be concerned?

I recently started using NordVPN and have noticed something strange. Sometimes when I connect to the VPN service in my system tray it will show a wifi connection and other times an ethernet ...
-1
votes
1answer
104 views

Is Private Internet Access (PIA) VPN safe to use? [closed]

As said in the PIA website they pretend to have the following VPN features: PPTP, OpenVPN and L2TP/IPSec SOCKS5 Proxy Included No traffic logs So my question are: Is Private Internet Access VPN ...
3
votes
5answers
309 views

Difference between SSH Tunnel / Proxy and VPN in terms of security

What benefits does a VPN have over just using a regular SSH Tunnel? I'm considering setting up OpenVPN on a server, but was wondering what benefits that would have over just using that same server as ...
0
votes
3answers
132 views

Does a self-hosted VPN (openvpn) at home encrypt traffic for my ISP? [duplicate]

Title says it all. If I host my own VPN at home (using openvpn), and connect my devices to it, will my ISP be able to see the contents of my traffic?
2
votes
1answer
116 views

Can a VPN server be traced through Tor?

I was wondering that if my data was intercepted by Tor by an exit node, would they be able to see which VPN server is being used to encrypt the data. I am asking because I planned on making an OpenVPN ...
0
votes
2answers
271 views

How does Netflix tell I'm behind a vpn managed with OpenVPN but not other managers?

I run Ubuntu 18.04 and use a VPN service. If I use OpenVPN to manage the connection and connect to a given server, then I can browse the internet as if I'm from that location, except for Netflix, ...
0
votes
1answer
180 views

watch DNS queries while using OpenVPN.-

I want to monitor/sniff the DNS queries I make while I'm using a VPN connection with my OpenVPN client. My initial motivation was to check if I'm leaking DNS queries; then using this page it seems I'm ...
2
votes
1answer
73 views

OpenVPN configuration and ISP's DNS

I have configured OpenVPN server for using Clouflare DNS - 1.1.1.1. I use OpenVPN connection in the next way: sudo openvpn --config Config.ovpn on my local machine in WiFi network. My ISP provider ...
1
vote
1answer
57 views

OpenVPN one account multiple servers & Load Balancing

I have recently been experimenting with OpenVPN. My aim is to create a group of servers in different locations with a single username and password for each user stored in a central database. For ...
7
votes
1answer
2k views

Can personal VPN help protecting my behavior on the company laptop?

Update: I don't care if the company knows I'm using a private VPN (this is allowed and confirmed with the IT department). My only concern is if the company knows I visited nba.com (for example). On ...
0
votes
1answer
202 views

Limit OpenVPN client certificate to specific VPN with shared CA chain

I've created a private x509 pki structure with openssl that consists of a self signed Root CA, an Intermediate CA and two Signing CA's. The signing CA's are used to separate the signing of ...
2
votes
1answer
52 views

OpenVPN client can still connect to the server after client's tls-auth key has changed

I'm currently getting familiar with OpenVPN by building and testing some client–server infrastructure using VMware workstation. This is what I've recently noticed: if you manually change some values ...
1
vote
1answer
312 views

What are the possible solution for blocking VPN connection on a home network?

I am not a techie. I am just wanting to force some parentral control using OPENDNS. Opendns works fine however it is easily broken on android or windows using vpn software like ultrasurf or latern or ...
1
vote
0answers
582 views

OpenVPN use auth-user-pass with a file and authenticator

I have an open vpn configuration with the lines auth-user-pass my-login-creds.conf static-challenge "Enter Google Authenticator Code" 1 in it. When I try to connect with openvpn my-config.ovpn I ...
1
vote
0answers
308 views

How to auto renew OpenVPN client certificates using easyRSA

I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
163 views

Differentiating between IKEv2 and OpenVPN Traffic

There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
1
vote
1answer
612 views

Wireguard: Is it suitable for road-warrior scenarios?

Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
0
votes
1answer
575 views

OpenVPN using google authenticator

I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
4
votes
1answer
708 views

Is it possible to detect VPN in the network?

Is it possible to detect the use of a VPN in a network? Let's say that I'm going to use a VPN during my connection in a country where internet is filtered, and to avoid been monitored I installed ...
1
vote
1answer
119 views

Is iptables and vpn tunneling enough? [closed]

What is the best approach to secure connection between two devices over the internet (public IP)? if there is a firewall on my public IP address deny access all incoming connection, can the hacker ...
0
votes
0answers
66 views

What are the dangers of a compromised private key in “pass + certificate” VPN auth?

A VPN service I've encountered supports connecting to it with NetworkManager in linux. The options are OpenVPN as the connection type, with Password with Certificates (TLS) as authentication type. ...
6
votes
3answers
700 views

Safe to commit OpenVPN client config to Git?

I'd like to commit my OpenVPN client config to version control, in a repo that's remotely hosted and publicly accessible. This would reveal the server's hostname and port, as well as the filepaths to ...
0
votes
1answer
601 views

OpenVPN Encryption Algorithm Used For Control Channel Encryption

In OpenVPN which algorithm is used for control channel encryption (--tls-crypt directive in OVPN profile)? By using --tls-crypt, will there be only encryption or authentication-then-encryption? I ...
0
votes
1answer
131 views

Is there any advantage to using encrypted DNS on a VPN server

I have a personal OpenVPN server. I am worried that the fact the DNS resolution coming out of the server isn't encrypted, since I am the only one that uses the server at the moment, attribution isn't ...
1
vote
2answers
3k views

Connecting to my VPN via IP or domain name?

Background: So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
1
vote
1answer
187 views

Is it possible to run Responder and/or Layer 2 ARP Poisoning over OpenVPN or an OpenVPN Ethernet Bridge?

Situation: We usually perform penetration tests from Linux machines connected to the clients local network. However for this test the client wants the start point to be a windows machine and has thus ...
0
votes
2answers
157 views

OpenVPN Traffic Capture

Forgive me if this is not the appropriate place to ask this. I was capturing some traffic on my home server during an active OpenVPN session using Mullvad recently and I noticed that the traffic is ...
1
vote
1answer
4k views

OpenVPN kill switch on Linux [closed]

How to prevent IP leak on Linux when OpenVPN fails to connect to the server while I am surfing on the net? I read about kill switch, but after some internet searches I found out that is not ...
0
votes
1answer
123 views

VPN Shared IP and wrongful attribution of traffic correlation of the encrypted packets by Feds/LEA

I use Pia, arguably one of the most popular paid VPN's on the market today. Imagine this HYPOTHETICAL scenario. I stay on the East coast, and i use my virtual IP location as the VPN's Datacenter in ...
2
votes
1answer
128 views

Appearance of yam bitcoin miner

I had a VM based on Ubuntu 16.04.03 and the only package added to it was OpenVPN. The purpose of it was to provide a VPN into my private network sited within the cloud environment. The hypervisor ...
5
votes
1answer
2k views

How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?

The problem is : Nothing prevents the user to copy the certficate/key on a different hardware device and use it from a different hardware device... Is it possible to generate a really unique ...
1
vote
1answer
122 views

SSH Proxy vs VPN Killswitch

This might be complete nonsense but I've heard people talking about so I'm interested to see if it's valid: I've heard people saying that SOCKS and SSH are more secure/private than a VPN because they ...
0
votes
2answers
305 views

VPN profile working in Iphone

I am using a VPN on my iphone https://itunes.apple.com/us/app/hotspot-vpn-free-secure-fast-internet/id1121846465?mt=8 Their privacy policy states that they can get data but doesn't says that will ...
1
vote
0answers
686 views

VPN connection through VPN connection using Virtual Machine

I read online that there is such thing as DoubleVPN what basically means PC -> vpn1 -> vpn2 -> internet However, its stated here: https://www.bestvpn.com/privacy-news/chaining-vpn-servers-double-...
2
votes
1answer
615 views

Are VPNs that expose device ID a security risk?

This is the first time I am using a VPN on my stock Android device. I bought VPN Unlimited mainly because it was on sale and without evaluating competitor products I was playing around with it and it ...
2
votes
2answers
1k views

Is it safe to provide others with a VPN server at home?

I'm trying to set up a VPN server on a Raspberry Pi at home to help some friends who live in a country where internet is severely filtered. So far I have found OpenVPN and PiVPN for this pourpose. ...
1
vote
2answers
121 views

Best alternative for monitoring traffic safely?

I need to monitor internet traffic from some smartphones (they want me to monitor them), and I am trying to determine what would be the best setup for my requirements. I was thinking that what I need ...