MrStack Posted January 27, 2016 Share Posted January 27, 2016 Hi there - If I want to do ICS with VPN, would I tell the wp6.sh script to use tun0 instead of wlan0 (assuming I'm on wifi and have vpn set up and running already). Thanks for the feedback. MrStack Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted January 29, 2016 Share Posted January 29, 2016 what's the output of "route" when you have your VPN dialed-in? Quote Link to comment Share on other sites More sharing options...
MrStack Posted February 4, 2016 Author Share Posted February 4, 2016 Sorry I disappeared on this question, Darren. I'll have to get back in front of the machine and update you; hopefully tonight. Quote Link to comment Share on other sites More sharing options...
b0N3z Posted February 7, 2016 Share Posted February 7, 2016 (edited) I have a VPN setup on my linux machine. My NANO connects with eth1 everytime with 172.16.42.240 and I just go to my browser and enter 172.16.42.1:1471 and it connects no problem. That is running wired or wireless connection for me. I also use a vpn on my mac and run a Linux mint VM, which i have the NANO setup to connect to automatically and it connects the same way, no problems. Edited February 7, 2016 by b0N3z Quote Link to comment Share on other sites More sharing options...
IMcPwn Posted February 10, 2016 Share Posted February 10, 2016 Hey guys, I got an OpenVPN client working on the Nano super easily. The command is opkg update && opkg install openvpn-openssl --dest sd Anyway once I have it connected I cannot ping (or connect in any other way) the nano from my computer (the OpenVPN server) but I can do the reverse. I have temporarily disabled ALL iptables rules and set the chain defaults to ACCEPT and still nothing. I'd like to say I'm decent at figuring out iptables but I can't work with the zone_wan_input and zone_lan_input, etc chains but I'm assuming that's not the problem because I deleted all of them (temporarily). This is also an issue on the Turtle for me. I have not tried setting the Nano or Turtle as default gateways on my server because I'm not using openvpn-as (access server), just plain old openvpn command line community edition so I'm not sure how to do that and can't find anything on google on how to do that. Here are my current iptables rules on the openvpn server: ip=`curl -sS -4 http://icanhazip.com` iptables -A FORWARD -s 10.8.0.0/24 -d 10.8.0.0/24 -j ACCEPT iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to $ip It'd be great if anybody had some insight on a solution, thanks in advance! Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted February 11, 2016 Share Posted February 11, 2016 Take a look at the /etc/config/firewall file and pay attention to the zones and src/dst routing. I did a video on this recently in regards to the LAN Turtle -- you can find it here: 1 Quote Link to comment Share on other sites More sharing options...
IMcPwn Posted February 11, 2016 Share Posted February 11, 2016 Thanks Darren! I tried forwarding LAN to WAN in /etc/config/firewall but it made no difference. I want to do what you're doing in the video but using OpenVPN community edition instead of access server but there is absolutely no information on how add a client as a gateway anywhere I can find, do you know how? Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted February 11, 2016 Share Posted February 11, 2016 Thanks Darren! I tried forwarding LAN to WAN in /etc/config/firewall but it made no difference. I want to do what you're doing in the video but using OpenVPN community edition instead of access server but there is absolutely no information on how add a client as a gateway anywhere I can find, do you know how? Make sure you allow routing both ways between src and dst. As for client gateway is community edition - no I never found this, hence using AS. :-/ Quote Link to comment Share on other sites More sharing options...
IMcPwn Posted February 11, 2016 Share Posted February 11, 2016 Aww. Thanks anyway Darren. I guess I'll try running access server and community edition at the same time :/ Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.