openvpn - One IP per one client VPN -


i'm trying give specific clients individual external ip addresses.

main config:

local main_ip port 1194 dev tun user nobody group $nogroup persist-key persist-tun keepalive 10 120 topology subnet server 10.8.0.0 255.255.0.0 client-config-dir /etc/openvpn/ccd ifconfig-pool-persist ipp.txt push "dhcp-option dns 80.67.169.12" push "dhcp-option dns 80.67.169.40" push "redirect-gateway def1 bypass-dhcp"

client config dir, i_client | /etc/openvpn/ccd/i_client:

ifconfig-push 10.8.33.1 10.8.33.2 iroute 10.8.33.0 255.255.255.0

from client client change subnet - 10.8.*.0

rules iptables:

accept - iptables -i forward -s 10.8.0.0/16 -j accept

for clients, config not defined in ccd directory - iptables -t nat -a postrouting -o ens3 -s 10.8.0.0/24 -j snat --to-source primary_external_ip

for 1 individual client - iptables -t nat -a postrouting -s "10.8.33.0/255.255.255.0" -o ens3 -j snat --to-source individual_external_ip

client:

client proto udp remote remote_ip 1194 dev tun resolv-retry infinite nobind persist-key persist-tun remote-cert-tls server auth sha256 cipher aes-128-cbc tls-client tls-version-min 1.2 tls-cipher tls-dhe-rsa-with-aes-128-gcm-sha256 setenv opt block-outside-dns

when try connect usual client primary ip - ok.

when try connect client individual ip - success auth, can not load sites.


Comments

Post a Comment

Popular posts from this blog

resizing Telegram inline keyboard -

telegram's inline keyboard great feature lots of different use cases. inline buttons added list of items this: inline_keyboard = [[inlinekeyboardbutton(text="button", callback_data="button"), inlinekeyboardbutton(text="reset",callback_data="reset")]] inline_keyboard_markup = inlinekeyboardmarkup(inline_keyboard) update.message.reply_text("hi", reply_markup=inline_keyboard_markup) the above code adds 2 buttons each half width of chat screen. i know the normal keyboard button there resize_keyboard parameter somehow can used. my question is there way resize inline buttons ? example make full width or quarter width. unfortunately, can't now. :( you can suggest @botsupport , might add feature next version.
Read more

command line - How can a Python program background itself? -

consider following python command-line program. doesn't work because incomplete, think illustrates problem: #!/usr/bin/python3 import multiprocessing pool = multiprocessing.pool() task in expensive_iterator_with_user_interaction(): pool.call_async(expensive_computation, (task,)) pool.close() print("dear user, may press ctrl-z , bg script.") pool.join() thus, problem scripts needs user input while it's launching expensive parallel processes. there moment when user interaction not needed anymore. then, ask user background process shell actions. however, can achieved program itself? (side note: core of problem entanglement of user input firing “expensive computations”. therefore, cannot separate both in 2 scripts, , letting 1 spawning other daemon.) the command screen may you. use screen -l create new session , run application. after inputting data, can press " ctrl-a " , press " d " on keyboard detach session. now...
Read more

php - "cURL error 28: Resolving timed out" on Wordpress on Azure App Service on Linux -

Image
my wordpress installation on azure app service on linux using custom docker container has slow response times. pages take around 20-40 seconds load. i have troubleshooting plugin installed indicates problem "curl error 28: resolving timed out after n milliseconds" when making requests following urls https://api.wordpress.org/core/version-check/1.7/ http://api.wordpress.org/core/version-check/1.7/ https://api.wordpress.org/plugins/update-check/1.1/ http://api.wordpress.org/plugins/update-check/1.1/ https://api.wordpress.org/themes/update-check/1.1/ http://api.wordpress.org/themes/update-check/1.1/ curl works fine on scm-site command line. example works ok. curl -x post http://api.wordpress.org/core/version-check/1.7/ edit if ssh container , run php code, works fine. <?php $url = 'http://api.wordpress.org/core/version-check/1.7/'; $fields = array( 'version' => urlencode('4.8.1'), 'php' => urlencode(...
Read more