You could use the same number for the connection mark, firewall mark and routing table. The idea is to ensure that when a connection to eth0 is made, even if eth0 is not the default gateway interface anymore, response packets for the connection go back on eth0 again. Below, it is assumed that the default gateway interface before OpenVPN is started is "eth0".
In order not to break your active remote connection you will need to set up appropriate route before lauching openvpn. To recover you'll need an alternative net rescue mode or a hard reboot. Using a VPN will change you IP address and default gateway so your remote connection will drop and you won't be able to connect to your server anymore.
Launching OpenVPN remotly (ex: via SSH) on a server like a VPS or a dedicated server can be dangerous. When seeing Initialization Sequence Completed you are succesfully connected. For example I'm using openvpn -setenv PATH '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin' -up /etc/openvpn/update-resolv-conf -/etc/openvpn/update-resolv-conf -down-pre -config 1194.ovpn, please not that when using arguments you need to use -config else you'll have an error message like Options error: Unrecognized option or missing or extra parameter(s) in :1: /etc/openvpn/update-resolv-conf (2.4.2). Note: don't forget to use the additionnal arguments that we saw during the install if you didn't change the config files. Connecting using the command line interface (CLI) # You man need to init the OpenVPN password. Note: if using a free account only Connect to server and a restricted number of country and server are available: 1įind your OpenVPN credentials in the account menu. Go to the download menu an download the config file you need (choose country and protocol).
setenv PATH '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin' -down-preĬreate an account or log in. Or alternatively if you don't want to edit your client configuration, you can add the following options to your openvpn command: 1 Setenv PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binĭown /etc/openvpn/update-systemd-resolved $ yaourt -S openvpn-update-systemd-resolved -neededīut you will need to change all ProtonVPN config files from: 1 Install openvpn-update-systemd-resolved: 1 To prevent DNS leakage you'll need an additional package, for more info see Arch Linux Wiki.
0 kommentar(er)
