Questions tagged [openvpn]

An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).

Filter by
Sorted by
Tagged with
0
votes
0answers
26 views

OpenVPN Access Server - Split tunnel to selected users [migrated]

Not sure if this is the right platform to ask. Here is my question: I have OpenVPN Access Server 2.6.1 currently configured with split tunnelling and its working fine. I have two VPN users, X and Y. ...
0
votes
1answer
62 views

For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?

Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables? Assuming my public ip is known (and I don't want to change it), would it provide complete ...
0
votes
1answer
144 views

how to force openvpn client to use TLS instead of SSL connection [duplicate]

i'm trying to use openvpn client to connect TLS VPN server here is my .ovpn file client tls-client dev tun proto tcp remote example.com 443 resolv-retry infinite auth-user-pass persist-key ...
0
votes
1answer
56 views

Is it safe to use RPC with sensitive data through an encrypted VPN connection instead of SSL/TLS?

I have an application where there I'm planning the following setup: user <-----------------> layer 1 server <------------------> backend server internet (https) ...
0
votes
1answer
45 views

What's the drawback of enabling auth-nocache in OpenVPN?

Using a "default" configuration, OpenVPN clients show the following warning when connecting to a VPN server in red, attention-seeking letters: WARNING: this configuration may cache passwords in ...
2
votes
2answers
210 views

What are the risks of installing a CA on the same machine as OpenVPN server?

Digital Ocean states in one of it's tutorial about OpenVPN server : While it’s technically possible to use your OpenVPN server or your local machine as your CA, this is not recommended as it ...
2
votes
1answer
82 views

Meterpreter and OpenVPN

During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example: I have a payload. Whenever that payload runs on the ...
0
votes
1answer
178 views

Are ARP attacks possible on OpenVPN and Wireguard connections?

I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & ...
2
votes
0answers
89 views

Loosing internet connection while connected to specific VPN server?

I have noticed a strange behaviour earlier today on my VPN on a specific server. When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
1
vote
1answer
126 views

Is my VPN leaking or is this normal?

Hi when I am not connected to my VPN and do a route print I get one 0.0.0.0 entry in the Network Destination column. It has a gateway of 192..... When I connect to my VPN and do a route print I get ...
0
votes
0answers
31 views

Is it possible to direct traffic first to my OS firewall and then to a full tunnel VPN?

I have rules on windows firewall for specific programs that I don't want communicating. I use windscribe's openvpn for perceived anonymity, but more importantly I want the firewall rules followed. ...
0
votes
0answers
214 views

What is a reasonable default_crl_days value for OpenVPN CLR? Why?

I am having trouble finding a definitive answer (with a rationale) on what a reasonable default value for default_crl_days (in openssl.cnf) for use with OpenVPN. The current default is 30 days. But ...
0
votes
0answers
100 views

Filter/Block OpenVPN clients' access to a specific website

As stated in the title I would like to restrict VPN clients' access to specific websites. More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
1
vote
3answers
172 views

Using a VPN for privacy?

Say I am only using a vpn for privacy (as is recommended by many people, especially on public wifi etc). How I understand it is that many people are using the same servers and have the same ip online. ...
0
votes
0answers
35 views

Anyway of finding connected devices on a vpn router from the VPN server itself?

I've setup my own OpenVpn server on AWS using an EC2 instance and I have a router with OpenWRT configured to connect to the VPN Server. Now, I want to have some EC2 running network scans such as NMAP ...
1
vote
1answer
289 views

Why is my VPN behaving like this and should I be concerned?

I recently started using NordVPN and have noticed something strange. Sometimes when I connect to the VPN service in my system tray it will show a wifi connection and other times an ethernet ...
-1
votes
1answer
226 views

Is Private Internet Access (PIA) VPN safe to use? [closed]

As said in the PIA website they pretend to have the following VPN features: PPTP, OpenVPN and L2TP/IPSec SOCKS5 Proxy Included No traffic logs So my question are: Is Private Internet Access VPN ...
4
votes
5answers
905 views

Difference between SSH Tunnel / Proxy and VPN in terms of security

What benefits does a VPN have over just using a regular SSH Tunnel? I'm considering setting up OpenVPN on a server, but was wondering what benefits that would have over just using that same server as ...
0
votes
3answers
333 views

Does a self-hosted VPN (openvpn) at home encrypt traffic for my ISP? [duplicate]

Title says it all. If I host my own VPN at home (using openvpn), and connect my devices to it, will my ISP be able to see the contents of my traffic?
2
votes
1answer
176 views

Can a VPN server be traced through Tor?

I was wondering that if my data was intercepted by Tor by an exit node, would they be able to see which VPN server is being used to encrypt the data. I am asking because I planned on making an OpenVPN ...
1
vote
2answers
614 views

How does Netflix tell I'm behind a vpn managed with OpenVPN but not other managers?

I run Ubuntu 18.04 and use a VPN service. If I use OpenVPN to manage the connection and connect to a given server, then I can browse the internet as if I'm from that location, except for Netflix, ...
0
votes
1answer
284 views

watch DNS queries while using OpenVPN.-

I want to monitor/sniff the DNS queries I make while I'm using a VPN connection with my OpenVPN client. My initial motivation was to check if I'm leaking DNS queries; then using this page it seems I'm ...
2
votes
1answer
96 views

OpenVPN configuration and ISP's DNS

I have configured OpenVPN server for using Clouflare DNS - 1.1.1.1. I use OpenVPN connection in the next way: sudo openvpn --config Config.ovpn on my local machine in WiFi network. My ISP provider ...
1
vote
1answer
166 views

OpenVPN one account multiple servers & Load Balancing

I have recently been experimenting with OpenVPN. My aim is to create a group of servers in different locations with a single username and password for each user stored in a central database. For ...
7
votes
1answer
2k views

Can personal VPN help protecting my behavior on the company laptop?

Update: I don't care if the company knows I'm using a private VPN (this is allowed and confirmed with the IT department). My only concern is if the company knows I visited nba.com (for example). On ...
0
votes
1answer
391 views

Limit OpenVPN client certificate to specific VPN with shared CA chain

I've created a private x509 pki structure with openssl that consists of a self signed Root CA, an Intermediate CA and two Signing CA's. The signing CA's are used to separate the signing of ...
2
votes
1answer
101 views

OpenVPN client can still connect to the server after client's tls-auth key has changed

I'm currently getting familiar with OpenVPN by building and testing some client–server infrastructure using VMware workstation. This is what I've recently noticed: if you manually change some values ...
1
vote
1answer
629 views

What are the possible solution for blocking VPN connection on a home network?

I am not a techie. I am just wanting to force some parentral control using OPENDNS. Opendns works fine however it is easily broken on android or windows using vpn software like ultrasurf or latern or ...
1
vote
0answers
678 views

OpenVPN use auth-user-pass with a file and authenticator

I have an open vpn configuration with the lines auth-user-pass my-login-creds.conf static-challenge "Enter Google Authenticator Code" 1 in it. When I try to connect with openvpn my-config.ovpn I ...
1
vote
0answers
464 views

How to auto renew OpenVPN client certificates using easyRSA

I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
270 views

Differentiating between IKEv2 and OpenVPN Traffic

There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
1
vote
1answer
761 views

Wireguard: Is it suitable for road-warrior scenarios?

Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
1
vote
1answer
1k views

OpenVPN using google authenticator

I'm a little new to OpenVPN. I'm trying to get google authenticator to work with OpenVPN but I'm having a little trouble. Currently I'm tring to setup a radius server to run the authentication then ...
4
votes
1answer
1k views

Is it possible to detect VPN in the network?

Is it possible to detect the use of a VPN in a network? Let's say that I'm going to use a VPN during my connection in a country where internet is filtered, and to avoid been monitored I installed ...
1
vote
1answer
133 views

Is iptables and vpn tunneling enough? [closed]

What is the best approach to secure connection between two devices over the internet (public IP)? if there is a firewall on my public IP address deny access all incoming connection, can the hacker ...
6
votes
3answers
717 views

Safe to commit OpenVPN client config to Git?

I'd like to commit my OpenVPN client config to version control, in a repo that's remotely hosted and publicly accessible. This would reveal the server's hostname and port, as well as the filepaths to ...
0
votes
1answer
755 views

OpenVPN Encryption Algorithm Used For Control Channel Encryption

In OpenVPN which algorithm is used for control channel encryption (--tls-crypt directive in OVPN profile)? By using --tls-crypt, will there be only encryption or authentication-then-encryption? I ...
0
votes
1answer
188 views

Is there any advantage to using encrypted DNS on a VPN server

I have a personal OpenVPN server. I am worried that the fact the DNS resolution coming out of the server isn't encrypted, since I am the only one that uses the server at the moment, attribution isn't ...
2
votes
2answers
4k views

Connecting to my VPN via IP or domain name?

Background: So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
1
vote
1answer
302 views

Is it possible to run Responder and/or Layer 2 ARP Poisoning over OpenVPN or an OpenVPN Ethernet Bridge?

Situation: We usually perform penetration tests from Linux machines connected to the clients local network. However for this test the client wants the start point to be a windows machine and has thus ...
0
votes
2answers
220 views

OpenVPN Traffic Capture

Forgive me if this is not the appropriate place to ask this. I was capturing some traffic on my home server during an active OpenVPN session using Mullvad recently and I noticed that the traffic is ...
1
vote
1answer
7k views

OpenVPN kill switch on Linux [closed]

How to prevent IP leak on Linux when OpenVPN fails to connect to the server while I am surfing on the net? I read about kill switch, but after some internet searches I found out that is not ...
0
votes
1answer
139 views

VPN Shared IP and wrongful attribution of traffic correlation of the encrypted packets by Feds/LEA

I use Pia, arguably one of the most popular paid VPN's on the market today. Imagine this HYPOTHETICAL scenario. I stay on the East coast, and i use my virtual IP location as the VPN's Datacenter in ...
2
votes
1answer
138 views

Appearance of yam bitcoin miner

I had a VM based on Ubuntu 16.04.03 and the only package added to it was OpenVPN. The purpose of it was to provide a VPN into my private network sited within the cloud environment. The hypervisor ...
6
votes
1answer
2k views

How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?

The problem is : Nothing prevents the user to copy the certficate/key on a different hardware device and use it from a different hardware device... Is it possible to generate a really unique ...
1
vote
1answer
143 views

SSH Proxy vs VPN Killswitch

This might be complete nonsense but I've heard people talking about so I'm interested to see if it's valid: I've heard people saying that SOCKS and SSH are more secure/private than a VPN because they ...
0
votes
2answers
370 views

VPN profile working in Iphone

I am using a VPN on my iphone https://itunes.apple.com/us/app/hotspot-vpn-free-secure-fast-internet/id1121846465?mt=8 Their privacy policy states that they can get data but doesn't says that will ...
1
vote
0answers
828 views

VPN connection through VPN connection using Virtual Machine

I read online that there is such thing as DoubleVPN what basically means PC -> vpn1 -> vpn2 -> internet However, its stated here: https://www.bestvpn.com/privacy-news/chaining-vpn-servers-double-...
2
votes
1answer
825 views

Are VPNs that expose device ID a security risk?

This is the first time I am using a VPN on my stock Android device. I bought VPN Unlimited mainly because it was on sale and without evaluating competitor products I was playing around with it and it ...
2
votes
2answers
2k views

Is it safe to provide others with a VPN server at home?

I'm trying to set up a VPN server on a Raspberry Pi at home to help some friends who live in a country where internet is severely filtered. So far I have found OpenVPN and PiVPN for this pourpose. ...