Showing posts with label VPN. Show all posts
Showing posts with label VPN. Show all posts

Saturday, April 4, 2015

PIA VPN setup on dd-wrt router

Taken from:
https://www.privateinternetaccess.com/pages/client-support/#ddwrt_pptp

DD-WRT: VPN OpenVPN Setup

  1. Access the Administration area and then go to Commands and finally Startup.
  2. Enter the following:
      echo username >> /tmp/password.txt
      echo password >> /tmp/password.txt
      /usr/bin/killall openvpn
      /usr/sbin/openvpn --config /tmp/openvpncl/openvpn.conf --route-up /tmp/openvpncl/route-up.sh --down-pre /tmp/openvpncl/route-down.sh --daemon
  3. Access the VPN tab found under the Services section.
  4. Enable the OpenVPN Client.
  5. Set the Server IP/name to us-east.privateinternetaccess.com [*].
  6. Set the Port to 1194.
  7. Set the Tunnel Device to TUN.
  8. Set the Tunnel Protocol to UDP.
  9. Set the Encryption Cipher to Blowfish CBC (Default).
  10. Set the Hash Algorithm to SHA1.
  11. Set the nsCertType to unchecked.
  12. Set the Advanced Options to Enabled.
  13. Set Use LZO Compression to Enable.
  14. Set NAT to Enable.
  15. In the Additional Config enter the following:
      auth-user-pass /tmp/password.txt
      persist-key
      persist-tun
      tls-client
      remote-cert-tls server
  16. Copy and paste the contents of ca.crt found in our OpenVPN Config Files, into the CA cert field.

Tuesday, March 24, 2015

SSH as a VPN

Reposted from http://www.linuxjournal.com/content/surf-safely-sshuttle

Mind you, sshuttle isn't a new program. It isn't even a new concept. What it is, however, is pure awesome. Basically, launching the sshuttle binary with root privileges will modify your system firewall to tunnel all (yes all) traffic through a remote SSH connection. The remote connection doesn't even need administrator privileges, so your shell account at your Web host might suffice for securing your traffic in a hotel or coffee shop. sshuttle will even tunnel your DNS lookups, which means your entire network interaction should be secure and encrypted.
sshuttle is in many OS repositories, or you can downloaded it from https://github.com/apenwarr/sshuttle.

With a simple
 sudo sshuttle --dns -vvr username@server 0/0,

all your traffic will be encrypted and funneled through the remote server. Because DNS also is tunneled, it means you won't be vulnerable to DNS poisoning either! Check out sshuttle today. You won't be sorry.

On Fedora

$ sudo yum -y install sshuttle

Then

$ sshuttle --dns -vvr [username]@server[:port] 0/0

If you have Error 255 issues with the VPN not connecting, then you should try excluding the subnet of the remote system from forwarding.

$ sshuttle --dns -vvr [username]@server[:port] -x server 0/0