31–36 of 36 posts
by only looking at the source (haven't installed it) I'm guessing this leaks ipv6 addresses and probably shouldn't be used. this is the second openvpn install script to match that description today.
Does anyone have alternatives to recommend? SoftEther looks like the bees knees from the website, but I haven't found trustworthy reviews from real users.
by only looking at the source (haven't installed it) I'm guessing this leaks ipv6 addresses and probably shouldn't be used. this is the second openvpn install script to match that description today.
Your comment would have been a lot more useful if you provided a link to info on how to prevent that.
depending on your server environment you'll want to use ip6tables with essentially the same commands as iptables, substituting for ipv6 addresses.
I use putty tunneling+proxifier (on windows) and a python script on my ubuntu box (The name is escaping me at the moment).
It's very simple to setup, doesn't require a ton of configuration, and can be just a secure as a VPN connection.
I've never been a fan of OpenVPN. Configuration is cumbersome and performance wasn't that great.
An easier alternative is to tunnel everything through a SSH connection. I use putty tunneling+proxifier (on windows) and a python script on my ubuntu box (The name is escaping me at the moment). It's very simple to setup, doesn't require a ton of configuration, and can be just a secure as a VPN connection. I've never been a fan of OpenVPN. Configuration is cumbersome and performance wasn't that great.
NOTE: some tips written down previously ;-) https://sites.google.com/site/imterry/computer/tools/ssh
In countries like China (and more) where massive state-sponsored Internet censorship is in place, the unusual SSH traffic pattern can be easily detected and IPs of the SSH server blocked in less than a hour. That's why IPsec (strongSwan) and OpenVPN start to become popular among Chinese netizens and skills have been developed (networking, security etc...) LoL
Earlier quoted context omitted.
Your comment would have been a lot more useful if you provided a link to info on how to prevent that.
sorry, I had mentioned it in the other thread -- in your openvpn config set server-ipv6 and use tun-ipv6[0]. depending on your server environment you'll want to use ip6tables with essentially the same commands as iptables, substituting for ipv6 addresses. 0. https://community.openvpn.net/openvpn/wiki/IPv6
Thanks.
In the past, I've had a habit of passing "ipv6.disable=1" (a.k.a. the "nuclear option") to the kernel on hosts I manage. I'm trying to get away from that, though, and lately, I've simply been dropping "everything IPv6" in my rulesets to avoid things like this.