Linux VPN that is compatable with Windows "Create a new connection" wizard

Discussion in 'Site & Server Administration' started by Supernub, Feb 26, 2009.

  1. #1
    Hello,

    I'm looking for a VPN that i can install on my Linux CentOS server i've had no luck with pptp or OpenVPN so what are the alternatives?
     
    Supernub, Feb 26, 2009 IP
  2. w0tan

    w0tan Peon

    Messages:
    77
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    0
    #2
    PopTop should work for you.

    I wanted to do the same thing, but with an OpenVPN server--but found out upon starting the project that the two used different protocols.
     
    w0tan, Feb 26, 2009 IP
  3. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Hi, this is the error message i get with PopTop in /var/log/messages

    Feb 19 15:24:56 SERV pptpd[32764]: CTRL: Client 87.132.61.71 control connection started
    Feb 19 15:24:56 SERV pptpd[32764]: CTRL: Starting call (launching pppd, opening GRE)
    Feb 19 15:24:56 SERV pppd[32765]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
    Feb 19 15:24:56 SERV pppd[32765]: This system lacks kernel support for PPP. This could be because the PPP kernel module could not be loaded, or because PPP was not included in the kernel configuration. I$
    Feb 19 15:24:56 SERV pptpd[32764]: GRE: read(fd=6,buffer=8059680,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and$
    Feb 19 15:24:56 SERV pptpd[32764]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
    Feb 19 15:24:56 SERV pptpd[32764]: CTRL: Client 87.132.61.71 control connection finished



    :( Gah im not having any luck at all
     
    Supernub, Feb 27, 2009 IP
  4. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #4
    i could help you with openvpn thing.. :)

    what's the problem?
     
    addietama, Feb 27, 2009 IP
  5. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    I've managed to setup OpenVPN and can connect with the windows GUI, only problem is though i have 3 IP address's on my VPS but OpenVPN apparently assigns me a 10.0.8..... etc one i want it to assign me one of my 3 public ones how could i do this?
     
    Supernub, Feb 28, 2009 IP
  6. buldozerceto

    buldozerceto Active Member

    Messages:
    1,137
    Likes Received:
    43
    Best Answers:
    0
    Trophy Points:
    88
    #6
    WHat version of centos are you running. it looks like the ppp module is not loaded.
     
    buldozerceto, Feb 28, 2009 IP
  7. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #7
    10.0.8.xxx is the default "local IP" between openVPN client and server which allocated at tun..

    perhaps what you mean is your out IP is one of your VPS IP?

    if so,

    echo 1 > /proc/sys/net/ipv4/ip_forward
    
    iptables -t nat -A POSTROUTING -s 10.11.12.0/24 -j SNAT --to xxx.xxx.xxx.xxx (xxx is your VPS IP) :)
    
    
    Code (markup):
     
    addietama, Feb 28, 2009 IP
  8. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Thanks so much, it all seems to be working now i can use putty and ssh to 10.0.8.1 and it goes to my server so OpenVPN is working, just one more question

    How can i encrypt my network traffic? I've seen companies offering a VPN service that encrypts all your traffic, http & other, is this possible? I dont want to start a company i just want a private VPN :D

    Thanks for the help! :D
     
    Supernub, Feb 28, 2009 IP
  9. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #9
    by using ./build-dh you are using 1024bit encryption... :)
     
    addietama, Feb 28, 2009 IP
  10. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Thats good :D But how can i make all my traffic go through my server?
     
    Supernub, Feb 28, 2009 IP
  11. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #11
    echo 1 > /proc/sys/net/ipv4/ip_forward

    iptables -t nat -A POSTROUTING -s 10.0.8.0/24 -j SNAT --to xxx.xxx.xxx.xxx (xxx is your VPS IP)

    try it.. :)
     
    addietama, Feb 28, 2009 IP
  12. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #12
    I tried that but nothing happened? :(
     
    Supernub, Feb 28, 2009 IP
  13. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #13
    are you using

    at your server.conf?

    if not, add it.. :) and restart your vpn..
     
    addietama, Feb 28, 2009 IP
  14. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #14
    Looks like it worked :D many thanks, also to make http traffic work will i have to install squid? :):)
     
    Supernub, Feb 28, 2009 IP
  15. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #15
    umm.. i don't know what you mean..
     
    addietama, Feb 28, 2009 IP
  16. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #16
    I want to be able to surf the web through the VPN, and log onto MSN and Steam etc? How can i do this?


    Thanks for all your help so far :D
     
    Supernub, Feb 28, 2009 IP
  17. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #17
    no probs.. ok, i'll give you an example of server.conf (server config) and client.ovpn (client config)

    this is my server.conf

    local xxx.xxx.xxx.xxx
    port 53
    proto udp
    dev tun
    tun-mtu 1500
    tun-mtu-extra 32
    mssfix 1450
    ;username-as-common-name
    ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
    cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
    key /etc/openvpn/easy-rsa/2.0/keys/server.key
    dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
    server 10.0.8.0 255.255.255.0
    #-ifconfig-pool-persist ipp.txt
    push "redirect-gateway"
    push "dhcp-option DNS 208.67.222.222"
    push "dhcp-option DNS 4.2.2.1"
    keepalive 5 30
    comp-lzo
    persist-key
    persist-tun
    status server-tcp.log
    log-append openvpn.log
    verb 3
    Code (markup):
    client config :
    client 
    dev tun
    proto udp
    remote xxx.xxx.xxx.xxx 53
    resolv-retry infinite
    nobind
    tun-mtu 1500
    tun-mtu-extra 32
    mssfix 1450
    persist-key
    persist-tun
    ca ca.crt
    cert your.crt
    key your.key
    ;auth-user-pass
    comp-lzo
    verb 3
    Code (markup):
    start your openvpn server, and then use that previous ip forward and iptables command

    connect... happy anonymous surfing.. :)
     
    addietama, Feb 28, 2009 IP
  18. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #18
    :(:(:( I tried your config but i get [FAILED] when trying to start OpenVPN, I guess it just does not want to work

    No error message in /var/log/messages either
     
    Supernub, Feb 28, 2009 IP
  19. addietama

    addietama Peon

    Messages:
    144
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #19
    well.. the location of your ca.crt, server.crt, server.key, and dh1024.pem ?

    and based on the config i give.. the log is at openvpn.log..

    log-append openvpn.log <<< location of this file is at the same directory as you server.conf.. :)
     
    addietama, Feb 28, 2009 IP
  20. Supernub

    Supernub Peon

    Messages:
    78
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #20
    Sat Feb 28 13:56:19 2009 OpenVPN 2.0.9 i386-redhat-linux [SSL] [LZO] [EPOLL] built on Feb 26 2009
    Sat Feb 28 13:56:19 2009 Diffie-Hellman initialized with 1024 bit key
    Sat Feb 28 13:56:19 2009 TLS-Auth MTU parms [ L:1X74 D:138 EF:38 EB:0 ET:0 EL:0 ]
    Sat Feb 28 13:56:19 2009 TCP/UDP: Socket bind failed on local address xxx.xxx.xxx.xxx: Address already in use
    Sat Feb 28 13:56:19 2009 Exiting
     
    Supernub, Feb 28, 2009 IP