[Openvpn-users] How to set a fixed IP to a client?

2023-09-02 Thread Jason Long via Openvpn-users
Hello, When I use "server 10.8.0.0 255.255.255.0" in the Server.conf file, then OpenVPN assigns IP addresses to clients respectively. What should I do if I want to assign a specific IP address to a client with a specific computer name or MAC address?

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread Bruno Tréguier via Openvpn-users
Le 03/09/2023 à 08:48, Jason Long via Openvpn-users a écrit : Hello, When I use "server 10.8.0.0 255.255.255.0" in the Server.conf file, then OpenVPN assigns IP addresses to clients respectively. What should I do if I want to assign a specific IP address to a client with a specifi

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread Jason Long via Openvpn-users
>Le 03/09/2023 à 08:48, Jason Long via Openvpn-users a écrit : >  Hello, > When I use "server 10.8.0.0 255.255.255.0" in the Server.conf file, then > OpenVPN assigns IP addresses to clients respectively. What should I do if I > want to assign a specific IP >address

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread Bruno Tréguier via Openvpn-users
in, read the f***ing docs: https://community.openvpn.net/openvpn/wiki/HOWTO#Configuringclient-specificrulesandaccesspolicies How can I give the IP address by MAC address? Why would you do that if you can use the certificate for the same purpose? At least give a plausible reason why the CN would

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread Jason Long via Openvpn-users
On Sun, Sep 3, 2023 at 5:38 PM, Bruno Tréguier via Openvpn-users wrote: Le 03/09/2023 à 15:23, Jason Long a écrit : > Hello, > As I said, I have some scenario and I want to >learn more. >By abusively relying on others? Strange way to >achieve your goals. > Do you mean &

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread Jason Long via Openvpn-users
ys takes IP address > 20.1.0.202. Am I right? >What's the first line for? Once again, read the f***ing docs: >https://community.openvpn.net/openvpn/wiki/HOWTO#Configuringclient-specificrulesandaccesspolicies > How can I give the IP address by MAC address? >Why would you do

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread Jason Long via Openvpn-users
>On Sun, 03 Sep 2023 15:39:56 +, tincantech via Openvpn-users wrote: >Your continued use >of this mailing list as an alternative to reading any documentation >has not gone unnoticed. >+1 >And it should result in *everyone* to stop responding to this list spammer who >

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread Jason Long via Openvpn-users
>Hi, >On 03/09/2023 20:50, Jason Long via Openvpn-users wrote: >    I read those steps from an OpenVPN document. Can you tell me where >    the problem is? >There is no problem. >It is simply not possible to "configure" OpenVPN to assign an IP address >based o

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-04 Thread Jason Long via Openvpn-users
>On 03/09/2023 15:23, Jason Long via Openvpn-users wrote: > > Hello, > As I said, I have some scenario and I want to learn more. >Have you ordered any of the books you've been recommended?  Have you >read any of them? >I would say you are pretty closed to gettin

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-04 Thread Jason Long via Openvpn-users
>On 03/09/2023 15:23, Jason Long via Openvpn-users wrote: > > Hello, > As I said, I have some scenario and I want to learn more. >Have you ordered any of the books you've been recommended?  Have you >read any of them? >I would say you are pretty closed to gettin

Re: [Openvpn-users] Push the server configuration to the client

2023-09-04 Thread Jason Long via Openvpn-users
uot;def1" >is always recommended.  So >push "redirect-gateway def1 autolocal" > The routing table is: > > C:\> route print 4 > > IPv4 Route Table > ======= > Active Routes: >

[Openvpn-users] URL forwarding and blacklisting

2023-09-21 Thread Jason Long via Openvpn-users
Hello,I have two questions:1- When someone connects to an OpenVPN server, is it possible to be redirected to duckduckgo.com when trying to go to google.com? 2- How can I block access to certain websites? Does OpenVPN offer such features? Thank you

[Openvpn-users] --user specified but lacking CAP_SETPCAP

2023-10-23 Thread Jason Long via Openvpn-users
Hello, My OpenVPN server started, but I got the following message in the "openvpn.log": --user specified but lacking CAP_SETPCAP. Cannot retain CAP_NET_ADMIN. Disabling data channel offload My server.conf is: port 2023 proto udp dev tun1 ca /etc/openvpn/server/ca.crt cert /etc/open

[Openvpn-users] How to solve the TLS key negotiation failed error?

2023-10-23 Thread Peter Davis via Openvpn-users
Hello, I installed the OpenVPN on Debian 12 and configured it as below: port 1194 proto udp dev tun0 server 10.11.0.0 255.255.255.0 push "dhcp-option DNS 1.1.1.1" push "dhcp-option DNS 8.8.8.8" topology subnet push "redirect-gateway def1 bypass-dhcp" keepalive 10 12

Re: [Openvpn-users] How to solve the TLS key negotiation failed error?

2023-10-23 Thread Peter Davis via Openvpn-users
--- On Monday, October 23rd, 2023 at 3:44 PM, Gert Doering wrote: > Hi, > > On Mon, Oct 23, 2023 at 12:10:28PM +, Peter Davis via Openvpn-users wrote: > > > How to solve it? > > > Look in the server logs if the server receives any packets at all. > > If y

Re: [Openvpn-users] How to solve the TLS key negotiation failed error?

2023-10-23 Thread Peter Davis via Openvpn-users
rt A. Heinlein, The Moon is a Harsh Mistress > > Gert Doering - Munich, Germany g...@greenie.muc.de ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] --user specified but lacking CAP_SETPCAP

2023-10-23 Thread Peter Davis via Openvpn-users
Hi, I see the same message. Linux capabilities? Should I install any package or...? Sent with Proton Mail secure email. --- Original Message --- On Monday, October 23rd, 2023 at 8:24 PM, Gert Doering wrote: > Hi, > > On Mon, Oct 23, 2023 at 11:03:27AM +, Jason Long vi

Re: [Openvpn-users] --user specified but lacking CAP_SETPCAP

2023-10-25 Thread Peter Davis via Openvpn-users
> --- Original Message --- > On Tuesday, October 24th, 2023 at 3:24 PM, Stefanie > Leisestreichler > wrote: > Hi. > > > On 24.10.23 07:46, Peter Davis via Openvpn-users wrote: > > > Hi, > > I see the same message. Linux capabilitie

[Openvpn-users] How to check the OpenVPN security?

2023-11-01 Thread Jason Long via Openvpn-users
Hello,Is there a tool to measure the security of OpenVPN connection? Something that tells if the security parameters used in the configuration file are sufficient or not. Thank you.___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net

[Openvpn-users] OpenVPN + Tor

2023-11-04 Thread Jason Long via Openvpn-users
Hello, I was able to combine OpenVPN with Tor using "https://gist.github.com/kremalicious/4c333c8c54fced00ab10c0a892a2304d"; tutorial. When I connect to the OpenVPN network without a Tor, I can ping the computers on the internal network by name, but with that configuration, I can&

Re: [Openvpn-users] OpenVPN + Tor

2023-11-06 Thread Jason Long via Openvpn-users
into the >tunnel and are finally dropped by the server gateway. >Openvpn has option : '--redirect-gateway  bypass-dns' >You could try that by using: >   redirect-gateway def1 bypass-dns >in your client configuration file. >You will probably also need to ignore the

Re: [Openvpn-users] OpenVPN + Tor

2023-11-06 Thread Jason Long via Openvpn-users
sume that 172.20.1.0/24 is a subnet on the server >side of the VPN; In which case you need to read the Howto >section which explains "Expanding the scope of the VPN ": >https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclie

Re: [Openvpn-users] How to check the OpenVPN security?

2023-11-06 Thread Jason Long via Openvpn-users
>Hi, >On Wed, Nov 01, 2023 at 05:16:52PM +, Jason Long via Openvpn-users wrote: > Hello,Is there a tool to measure the security of OpenVPN connection?  > Something that tells if the security parameters used in the configuration > file are sufficient or not. >For TL

[Openvpn-users] Issue with "up" and "down" script

2023-11-10 Thread Leroy Tennison via Openvpn-users
sses) and other times it doesn't.  In order to troubleshoot I added the output to the file in /tmp.  Now, when the DNS update is working, there's no file in /tmp.  Any ideas why or suggestions? Configuration file lines are: up /etc/openvpn/adj-dnsdown /etc/openvpn/adj-dns The f

Re: [Openvpn-users] OpenVPN + Tor

2023-11-21 Thread Jason Long via Openvpn-users
>-BEGIN PGP SIGNED MESSAGE- >Hash: SHA256 >Hi, >On Tuesday, 7 November 2023 at 05:27, Jason Long wrote: > > > Hello, > I added the following line to the server.conf file: > > push "route 172.20.0.0 255.255.255.0" > > Then, I restarted

[Openvpn-users] Remote DNS server

2023-12-06 Thread Jason Long via Openvpn-users
Hello, Suppose the OpenVPN server is located in another country, but the DNS server is inside the company. What options should be included in the server and client configuration file? Thank you. ___ Openvpn-users mailing list Openvpn-users

Re: [Openvpn-users] Remote DNS server

2023-12-11 Thread Jason Long via Openvpn-users
> On 06/12/2023 11:09, Jason Long via Openvpn-users wrote: > Hello, > Suppose the OpenVPN server is located in another country, but the DNS server > is inside the company. What options should be included in the server and > client configuration >file? > > Thank you

[Openvpn-users] Reference manual for OpenVPN 2.6 PDF

2023-12-11 Thread Jason Long via Openvpn-users
Hello, How can I download the Reference manual for OpenVPN 2.6 (https://openvpn.net/community-resources/reference-manual-for-openvpn-2-6/) as a PDF file? Thank you. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https

[Openvpn-users] OpenVPN for Android and iOS

2023-12-11 Thread Jason Long via Openvpn-users
solution? Thank you. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] [ext] OpenVPN for Android and iOS

2023-12-11 Thread Ralf Hildebrandt via Openvpn-users
* Jason Long via Openvpn-users : > Hello, > If I want to use the "tls-crypt" option, then the "ta.key" must be a separate > file and it cannot be merged with the rest of the keys in one file. To be > honest, it is difficult to use for both computer and mobile

Re: [Openvpn-users] OpenVPN for Android and iOS

2023-12-11 Thread Jason Long via Openvpn-users
> On 11/12/2023 11:18, Jason Long via Openvpn-users wrote: > Hello, > If I want to use the "tls-crypt" option, then the "ta.key" must be a separate > file and it cannot be merged with the rest of the keys in one file. To be > honest, it is difficult to use

[Openvpn-users] Bypassing censorship devices

2023-12-11 Thread Peter Davis via Openvpn-users
Hello, How to use OpenVPN in a country that uses internet censorship devices to block VPN services? Is there a way to hide OpenVPN or make it look like a normal internet connection? Cheers.___ Openvpn-users mailing list Openvpn-users

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Stella Ashburne via Openvpn-users
Attention: Peter Davis Hi Peter  >Sent: Tuesday, December 12, 2023 at 3:15 PM >From: "Hans via Openvpn-users" >To: peter.davis1...@proton.me, openvpn-users@lists.sourceforge.net >Subject: Re: [Openvpn-users] Bypassing censorship devices > > > >>

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Stella Ashburne via Openvpn-users
Hi Peter  >Sent: Tuesday, December 12, 2023 at 2:03 PM >From: "Peter Davis via Openvpn-users" >To: "Tincantech via Openvpn-users" >Subject: [Openvpn-users] Bypassing censorship devices > >Hello, >How to use OpenVPN in a country that uses internet censo

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Peter Davis via Openvpn-users
> On Tuesday, December 12th, 2023 at 10:45 AM, > j.witvl...@mindef.nl > wrote: >> From: "Peter Davis via Openvpn-users" >> Date: Tuesday, 12 December 2023 at 07:08:08 >> To: "Tincantech via Openvpn-users" >> Subject: [Openvpn-users] By

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Peter Davis via Openvpn-users
> On Tuesday, December 12th, 2023 at > 5:13 PM, Stella Ashburne via > Openvpn-users wrote: > Attention: Peter Davis > > Hi Peter > > > Sent: Tuesday, December 12, 2023 at 3:15 PM > > From: "Hans via Openvpn-users" openvpn-users@lists.sourceforge.net

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Peter Davis via Openvpn-users
> On Tuesday, December 12th, 2023 at 5:03 PM, Stella Ashburne via Openvpn-users > wrote: > Hi Peter > > > Sent: Tuesday, December 12, 2023 at 2:03 PM > > From: "Peter Davis via Openvpn-users" openvpn-users@lists.sourceforge.net > > To: &quo

Re: [Openvpn-users] OpenVPN for Android and iOS

2023-12-12 Thread Jason Long via Openvpn-users
> You need to check the server log to understand what's going on. > Cheers, On December 12, 2023 6:59:40 AM GMT+01:00, Jason Long wrote: >  > On 11/12/2023 11:18, Jason Long via Openvpn-users wrote: >> Hello, >> If I want to use the "tls-crypt" option, t

Re: [Openvpn-users] OpenVPN for Android and iOS

2023-12-12 Thread Jason Long via Openvpn-users
> Hi, > On Tue, Dec 12, 2023 at 05:59:40AM +, Jason Long via Openvpn-users wrote: > https://paste.mozilla.org/CwWTPPW0 > I'd guess it's the "key-direction" line getting in the way.  Remove this > from both client and server config. > Also, you are

Re: [Openvpn-users] Reference manual for OpenVPN 2.6 PDF

2023-12-12 Thread Jason Long via Openvpn-users
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > I believe the correct answer here is:  > OpenVPN does not provide a PDF form of the manual. > Which is a practical decision. > HTH > --  > Sent with Proton Mail secure email. > On Monday, 11 December 2023 at 18

Re: [Openvpn-users] Bypassing censorship devices

2023-12-13 Thread Peter Davis via Openvpn-users
> On Wednesday, December 13th, 2023 at 12:13 AM, j.witvl...@mindef.nl > wrote: >> From: "Peter Davis via Openvpn-users" >> Date: Tuesday, 12 December 2023 at 19:46:18 >> To: "Stella Ashburne" >> Cc: "openvpn-users@lists.sourcefo

Re: [Openvpn-users] Bypassing censorship devices

2023-12-14 Thread Stella Ashburne via Openvpn-users
Hi > Sent: Wednesday, December 13, 2023 at 2:42 AM > From: "Peter Davis" > To: "Stella Ashburne" > Cc: openvpn-users@lists.sourceforge.net > Subject: Re: [Openvpn-users] Bypassing censorship devices > > > > Hello, > Tor and all its modes lik

[Openvpn-users] Are my configurations secure enough?

2023-12-22 Thread Jason Long via Openvpn-users
Hello,My server and client configurations are as follows: https://paste.mozilla.org/sR05JKfV https://paste.mozilla.org/PxsW6MC8 Are these suitable in terms of security? Do you have any suggestions to improve them? Thank you. ___ Openvpn-users mailing

[Openvpn-users] How to use a 4096 bit OpenVPN static key?

2023-12-22 Thread Jason Long via Openvpn-users
Hello,How can I change the 2048 bit OpenVPN static key to 4096?When generating the Diffie-Hellman key, I chose it to be 4096 bits, are these two related? Thank you.___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https

Re: [Openvpn-users] Are my configurations secure enough?

2023-12-27 Thread Jason Long via Openvpn-users
>Hello, >My server and client configurations are as follows: >https://paste.mozilla.org/sR05JKfV >https://paste.mozilla.org/PxsW6MC8 >Are these suitable in terms of security? Do you have any suggestions to >improve them? >Thank you. ___

Re: [Openvpn-users] Are my configurations secure enough?

2023-12-27 Thread Jason Long via Openvpn-users
> hi, > On Wed, Dec 27, 2023 at 09:48:34AM +, Jason Long via Openvpn-users wrote: > >My server and client configurations are as follows: > > >https://paste.mozilla.org/sR05JKfV > > >https://paste.mozilla.org/PxsW6MC8 > > >Are these suitable in terms o

Re: [Openvpn-users] easy-rsa

2023-12-27 Thread Leroy Tennison via Openvpn-users
;t tell whether it's ultimately a Red Hat or Debian derivative, at least for Ubuntu (Debian derivative) easy-rsa is a separate package.  The certs/keys/etc produced still work with openvpn.  You should be aware that the architecture has changed between easy-rsa 2.0 and 3.0, if you switch yo

[Openvpn-users] Limit the number of users based on the key

2023-12-31 Thread Peter Davis via Openvpn-users
Hello, How can I limit the number of users based on a key? For example, only 10 users can use a key at the same time. Thank you.___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn

[Openvpn-users] OpenVPN and outside clients

2024-01-02 Thread Peter Davis via Openvpn-users
nternet, a public IP address is forwarded to the IP address of the OpenVPN server. For example, on the firewall, IP address 1.2.3.4 is forwarded to IP address 192.168.1.1. I want to know, if I replace the IP address 1.2.3.4 instead of 192.168.1.1 in the client configuration file, then the clients shou

[Openvpn-users] obfs4proxy-openvpn

2024-01-03 Thread Peter Davis via Openvpn-users
Hello, Has anyone used obfs4proxy-openvpn? This project is a bit old and its last update is on Aug 31, 2019. The project URL is https://github.com/HRomie/obfs4proxy-openvpn-linux. Thanks.___ Openvpn-users mailing list Openvpn-users

[Openvpn-users] Transfer from one server to another, compress and digest

2024-01-03 Thread Peter Davis via Openvpn-users
Hello, I have two questions: 1- Is it possible to transfer server and client keys from one server to another or must the keys be generated on each server? 2- I connected to an OpenVPN server with the OpenVPN Connect app on Android, I saw the following two lines in the logs: compress: NONE

[Openvpn-users] Firewall rules and ports

2024-01-06 Thread Peter Davis via Openvpn-users
Hello, 1- Is it possible to run all OpenVPN servers on one port? I currently have an OpenVPN server running with an IP address range of 20.20.0.0 on port 2024, now I want to run another server with a different IP address range on the same port as before. 2- Should every OpenVPN server have its

[Openvpn-users] I have a question about Easy-RSA

2024-01-06 Thread Peter Davis via Openvpn-users
Hello, I edited the vars file as below and created an OpenVPN server: export KEY_COUNTRY="US" export KEY_PROVINCE="CA" export KEY_CITY="NY" export KEY_ORG="GreatCoder" export [KEY_EMAIL="admin@greatcoder.](mailto:KEY_EMAIL=)xyz"export KEY_OU=

Re: [Openvpn-users] Transfer from one server to another, compress and digest

2024-01-06 Thread Peter Davis via Openvpn-users
>On Saturday, January 6th, 2024 at 12:27 PM, Gert Doering >wrote: > Hi, > > On Sat, Jan 06, 2024 at 07:03:37AM +, Peter Davis wrote: > > > 1- But I need to put the server and client keys in /etc/openvpn/server and > > /etc/openvpn/client directories. Am I

Re: [Openvpn-users] Transfer from one server to another, compress and digest

2024-01-06 Thread Peter Davis via Openvpn-users
>On Wednesday, January 3rd, 2024 at 7:53 PM, Gert Doering >wrote: > Hi, > > On Wed, Jan 03, 2024 at 04:04:02PM +, Peter Davis via Openvpn-users wrote: > > > I have two questions: > > 1- Is it possible to transfer server and client keys from one server to &

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-06 Thread Peter Davis via Openvpn-users
>On Sunday, January 7th, 2024 at 1:27 AM, Gert Doering >wrote: > Hi, > > On Sat, Jan 06, 2024 at 06:48:55AM +, Peter Davis via Openvpn-users wrote: > > > Now I want to create another server and when I use the command "./easyrsa > > init-pki",

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-07 Thread David Sommerseth via Openvpn-users
On 07/01/2024 21:20, Bo Berglund wrote: [...snip...] If you have a couple of OpenVPN servers operating off of certs and keys generated back in 2014 (like I have), then these are probably set to expire this year 2024 because I think that the easyrsa I used back then sets a 10 year life of these

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-07 Thread Peter Davis via Openvpn-users
> On Sunday, January 7th, 2024 at 10:52 PM, Jochen Bern > wrote: > On 07.01.24 06:50, Peter Davis via Openvpn-users wrote: > > > As you can see, I have moved the files to /etc/openvpn/server directory. > > > Correction: You have copied SOME files to that director

Re: [Openvpn-users] Firewall rules and ports

2024-01-07 Thread Peter Davis via Openvpn-users
> On Sunday, January 7th, 2024 at 1:00 AM, Antonio Quartulli > wrote: > Hi, > > On 06/01/2024 08:43, Peter Davis via Openvpn-users wrote: > > > Hello, > > 1- Is it possible to run all OpenVPN servers on one port? I currently have > > an OpenVPN server

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-07 Thread Peter Davis via Openvpn-users
nnect with some other auth > mechanism ("username + password", etc.). > > But generally speaking, users will not do this, as OpenVPN will (by > default) not permit two parallel connections with the same cert - so > the second user will kick out the first, and vice ver

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-08 Thread Peter Davis via Openvpn-users
>On Monday, January 8th, 2024 at 2:55 PM, Jochen Bern >wrote: > On 08.01.24 07:19, Peter Davis wrote: > > > On Sunday, January 7th, 2024 at 10:52 PM, Jochen Bern jochen.b...@binect.de > > wrote: > > > > > On 07.01.24 06:50, Peter Davis via Openvpn-user

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-08 Thread Peter Davis via Openvpn-users
>On Monday, January 8th, 2024 at 3:38 PM, Antonio Quartulli >wrote: > Hi, > > On 08/01/2024 13:02, Peter Davis via Openvpn-users wrote: > > > I still don't quite understand why I shouldn't delete the Easy-RSA > > directory after generating the ke

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-08 Thread Peter Davis via Openvpn-users
>On Monday, January 8th, 2024 at 3:59 PM, Gert Doering >wrote: > Hi, > > On Mon, Jan 08, 2024 at 12:02:58PM +, Peter Davis via Openvpn-users wrote: > > > 1- What tool do you use to generate server and client keys? > > > Something homegrown, based on e

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-08 Thread Peter Davis via Openvpn-users
> > 1- Assuming my vars file is as follows: > > > > export KEY_COUNTRY="US" > > export KEY_PROVINCE="CA" > > export KEY_CITY="NY" > > export KEY_ORG="GreatCoder" > > export KEY_EMAIL="ad...@greatcoder.xyz"

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-08 Thread Peter Davis via Openvpn-users
nnect with some other auth > mechanism ("username + password", etc.). > > But generally speaking, users will not do this, as OpenVPN will (by > default) not permit two parallel connections with the same cert - so > the second user will kick out the first, and vice versa. Unpl

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-09 Thread Peter Davis via Openvpn-users
>On Tuesday, January 9th, 2024 at 11:33 AM, Gert Doering >wrote: > Hi, > > On Tue, Jan 09, 2024 at 07:20:24AM +, Peter Davis wrote: > > > 1- So one of the benefits of using LDAP mechanism is that two users cannot > > use the OpenOne server at the same t

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-09 Thread Peter Davis via Openvpn-users
x27;t know how to do that. I want no one to > > be able to connect to the OpenVPN server without permission. > > > If a user has no key, they have no permission. If you give them a key, > you have given them permission. > > If you want stronger auth, add --auth-user-pass

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-09 Thread Peter Davis via Openvpn-users
h-user-pass, can > > two users with the same username and password connect to the server > > at the same time? > > > No, because OpenVPN will not (unless told otherwise) permit two logins > with the same client key+cert at the same time. > > > 2- One server for all d

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-09 Thread Peter Davis via Openvpn-users
>On Tuesday, January 9th, 2024 at 2:40 PM, Antonio Quartulli >wrote: > Hi, > > On 09/01/2024 08:18, Peter Davis via Openvpn-users wrote: > > > Hi, > > So if I want to revoke the keys in the future and prevent clients from > > connecting to the server, the

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-09 Thread Peter Davis via Openvpn-users
want to block access to the server through that key. You must revoke the certificate of the supervision department. If each department has its own key, then this does not affect other departments. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Are my configurations secure enough?

2024-01-09 Thread David Sommerseth via Openvpn-users
On 27/12/2023 12:43, Jason Long via Openvpn-users wrote: [...snipp...] Server config is: port 2023 proto udp dev tun1 ca /etc/openvpn/server/ca.crt cert /etc/openvpn/server/H_Server.crt key /etc/openvpn/server/H_Server.key dh /etc/openvpn/server/dh.pem server 20.20.0.0 255.255.255.0 20.20.0.0

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-09 Thread Peter Davis via Openvpn-users
-types > > > > Is it enough to keep the pki directory? > > > Why not keeping everything? > > Cheers, > > -- > Antonio Quartulli Hi, To be honest, the size of the files is not much, but just for my own information, I wanted to know which files are necessary.

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-09 Thread Peter Davis via Openvpn-users
g - Munich, Germany g...@greenie.muc.de Hi, Thanks again. True, but I don't want to create a key for each employee in the department. About auth-user-pass I have two options. One is to create a username and password on the OpenVPN server (Linux), and the other is to connect OpenVPN to Active Di

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-11 Thread Peter Davis via Openvpn-users
elf contains a unique IP address, a unique port and a unique TUN. For example, for 100 users, there are 100 configuration files, 100 IP addresses, 100 open ports and 100 TUNs. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-14 Thread Peter Davis via Openvpn-users
>On Friday, January 12th, 2024 at 12:04 AM, Jochen Bern >wrote: > On 11.01.24 20:35, Peter Davis via Openvpn-users wrote: > > > On Wednesday, January 10th, 2024 at 11:25 AM, Gert Doering > > g...@greenie.muc.de wrote: > > > > > On Wed, Jan 10, 2024

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-14 Thread Peter Davis via Openvpn-users
uration files, > > 100 IP addresses, 100 open ports and 100 TUNs. > > > OpenVPN Server is point-to-multipoint, so a single server can easily > handle 1000s of clients. > > You need a unique key+cert per client, which form a unique client config > (everything not key/cert r

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-15 Thread Peter Davis via Openvpn-users
>On Monday, January 15th, 2024 at 10:51 AM, Gert Doering >wrote: > Hi, > > On Mon, Jan 15, 2024 at 06:25:38AM +, Peter Davis via Openvpn-users wrote: > > > Thanks again. > > Should I run the following commands for each client? > > > > $ ./easyrs

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-15 Thread Peter Davis via Openvpn-users
>On Monday, January 15th, 2024 at 5:14 PM, Gert Doering >wrote: > Hi, > > On Mon, Jan 15, 2024 at 08:41:16AM +, Peter Davis wrote: > > > Yes, but shouldn't you copy the following files for each client? > > > > # cp pki/ca.crt /etc/openvpn/cl

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-15 Thread Peter Davis via Openvpn-users
n, Jan 15, 2024 at 04:35:40PM +, Peter Davis wrote: > > > > > > > If so, why is there a directory named "client" under /etc/openvpn/ > > > directory? > > > The /etc/openvpn/client directory is intended for use of client openvpn > configura

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-16 Thread Peter Davis via Openvpn-users
> On Tuesday, January 16th, 2024 at 10:59 AM, Gert Doering > wrote: > Hi, > > On Tue, Jan 16, 2024 at 07:10:02AM +, Peter Davis via Openvpn-users wrote: > > > Hi, > > Thanks again. > > So, if I delete the client keys from the OpenVPN server, >

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-16 Thread Peter Davis via Openvpn-users
> On Tuesday, January 16th, 2024 at 11:38 AM, Gert Doering > wrote: > Hi, > > On Tue, Jan 16, 2024 at 08:03:41AM +, Peter Davis wrote: > > > 1- You said "I said that OpenVPN will (by default) disallow multiple logins > > with the same client key+ce

[Openvpn-users] Two questions about key generation for clients

2024-01-16 Thread Peter Davis via Openvpn-users
, host or server name) [client name]: I just hit the enter key and the key was generated. I repeated the same thing for the second client and just changed the name of the client. Now, two clients should be able to connect to the OpenVPN server simultaneously. Am I right? 2- Are ca.key and ta.key

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-16 Thread Peter Davis via Openvpn-users
>On Tuesday, January 16th, 2024 at 8:40 PM, Gert Doering >wrote: > Hi, > > On Tue, Jan 16, 2024 at 05:02:59PM +, Peter Davis via Openvpn-users wrote: > > > I have generated server keys and I have two questions for generating client > > keys: > > 1-

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Peter Davis via Openvpn-users
>On Wednesday, January 17th, 2024 at 11:23 AM, Gert Doering > wrote: > Hi, > > On Wed, Jan 17, 2024 at 07:45:21AM +, Peter Davis wrote: > > > I use the OpenVPN Connect app on Android and PC. When I connect to the > > server with the same key on two devices,

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Peter Davis via Openvpn-users
connected to the server with the > > same key. When the second client connects, OpenVPN Connect on the > > first client is still connected but not working. > > > As you can see, the server has kicked the first client. It might not > have noticed yet - but as you noticed "n

[Openvpn-users] OpenVPN and Google Play

2024-01-17 Thread Peter Davis via Openvpn-users
Hello, I have tunneled OpenVPN on Tor and I connect to OpenVPN server with OpenVPN Connect app on Android and PC. On Android I can't open some apps like Google Play and X, but when I use Orbot on Android these apps open. What changes does OpenVPN make? Than

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Peter Davis via Openvpn-users
>On Wednesday, January 17th, 2024 at 2:23 PM, Gert Doering > wrote: > Hi, > > On Wed, Jan 17, 2024 at 10:17:27AM +, Peter Davis wrote: > > > But why didn't the previous OpenVPN Connect disconnect? I want the previous > > user to be disconnected. >

[Openvpn-users] iptables rules required for OpenVPN and Tor

2024-01-19 Thread Peter Davis via Openvpn-users
Hello, To set up a normal OpenVPN server, I use the following iptables rules: # IF_MAIN=enp0s3 # IF_TUNNEL=tun0 # YOUR_OPENVPN_SUBNET=10.8.0.0/16 # iptables -I INPUT -p udp --dport 1194 -j ACCEPT # iptables -A FORWARD -i $IF_MAIN -o $IF_TUNNEL -m state --state ESTABLISHED,RELATED -j ACCEPT

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-19 Thread Peter Davis via Openvpn-users
yself till I met a computer with a sense of humor." > Robert A. Heinlein, The Moon is a Harsh Mistress > > Gert Doering - Munich, Germany g...@greenie.muc.de Hi, Thanks again. It did not work! Is it possible to notify the previous user via email or SMS when another user connects

Re: [Openvpn-users] iptables rules required for OpenVPN and Tor

2024-01-19 Thread Peter Davis via Openvpn-users
>On Friday, January 19th, 2024 at 5:04 PM, Jochen Bern >wrote: > On 19.01.24 13:59, Peter Davis via Openvpn-users wrote: > > > I want to tunnel OpenVPN on Tor and I found the following iptables rules: > > > > # export OVPN=tun0 > > # IPTABLES -A INPUT -i $

[Openvpn-users] The openvpn-status.log file

2024-01-20 Thread Peter Davis via Openvpn-users
Hello, How can I save the contents of the openvpn-status.log file? When someone connects to the server, his\her information is placed in this file, and when he\she leaves the server, his\her information is deleted! I want to know who is connected to the server. Thank you

[Openvpn-users] Hide OpenVPN behind HTTPS/SSL

2024-01-21 Thread Peter Davis via Openvpn-users
Hello, I found the following article about hiding OpenVPN behind HTTPS: https://snikt.net/blog/2016/12/01/how-not-to-hide-openvpn-behind-https/ssl/ As you can see, this article is old (December 1, 2016). I have three questions: 1- Does this method work nowadays? 2- Do Internet censorship

Re: [Openvpn-users] iptables rules required for OpenVPN and Tor

2024-01-22 Thread Peter Davis via Openvpn-users
>On Monday, January 22nd, 2024 at 10:41 AM, Jochen Bern >wrote: > On 20.01.24 07:24, Peter Davis wrote: > > > On Friday, January 19th, 2024 at 5:04 PM, Jochen Bern jochen.b...@binect.de > > wrote: > > > > > On 19.01.24 13:59, Peter Davis via Openvp

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-22 Thread David Sommerseth via Openvpn-users
On 21/01/2024 17:34, tincantech via Openvpn-users wrote: Can I edit this file and remove the item --suppress-timestamps to possibly enable the timestamps? And remove the machine-readable-output item in the actual service conf file? Will that result in human-readable timestamps? The

[Openvpn-users] OpenVPN on port 443

2024-01-23 Thread Peter Davis via Openvpn-users
Hello, I want to use OpenVPN and HTTPS. I found the following article: https://snikt.net/blog/2016/12/01/how-not-to-hide-openvpn-behind-https/ssl/ My server has two NICs: enp0s3 (NAT) enp0s8 (Local) My OpenVPN server.conf is as below: port 443 proto tcp dev tun1 local 0.0.0.0 port-share

Re: [Openvpn-users] OpenVPN on port 443

2024-01-23 Thread Peter Davis via Openvpn-users
>On Tuesday, January 23rd, 2024 at 4:37 PM, Jakob Curdes >wrote: > Am 23.01.2024 um 13:32 schrieb Peter Davis via Openvpn-users: > > > Hello, > > I want to use OpenVPN and HTTPS. I found the following article: > > (...) > > > > > > > ser

Re: [Openvpn-users] OpenVPN on port 443

2024-01-24 Thread Peter Davis via Openvpn-users
>On Wednesday, January 24th, 2024 at 11:18 AM, Marc SCHAEFER > wrote: > Hello, > > On Wed, Jan 24, 2024 at 06:14:22AM +, Peter Davis via Openvpn-users wrote: > > > 1- I don't understand what you mean about "server 20.20.0.0 255.255.255.0". > >

[Openvpn-users] OpenVPN and V2Ray

2024-01-27 Thread Peter Davis via Openvpn-users
Hello, I want to use OpenVPN with V2Ray. I took a look at the OpenVPN configuration with Shadowsocks and saw that in the Client.conf file there were two lines as follows: socks-proxy 127.0.0.1 1080 route SHADOWSOCKS_SERVER_IP 255.255.255.255 net_gateway I have two questions: 1- Are these two

Re: [Openvpn-users] OpenVPN on port 443

2024-01-27 Thread Peter Davis via Openvpn-users
So, use subnets within private address ranges (10.0.0.0/8, 172.16.0.0/12, > 192.168.0.0/16), or possibly > some other reserved addresses [1]. > > Do not use public addresses unless you own them. > > > How can I make OpenVPN look like an HTTPS connection? > > > Do y

Re: [Openvpn-users] OpenVPN on port 443

2024-01-27 Thread Peter Davis via Openvpn-users
>On Thursday, January 25th, 2024 at 1:25 AM, Jochen Bern > wrote: > On 24.01.24 13:31, Hans via Openvpn-users wrote: > > > From: "Gert Doering" mailto:g...@greenie.muc.de> > > Date: Wednesday, 24 January 2024 at 13:03:30 > > > > > On We

<    2   3   4   5   6   7   8   9   >