Raspberry PI VPN - Revision history

imported>Jacob at 21:24, 6 March 2020

2020-03-06T21:24:58Z

← Older revision		Revision as of 16:24, 6 March 2020
Line 27:		Line 27:
	$ sudo iptables -A OUTPUT -o tun+ -j ACCEPT		$ sudo iptables -A OUTPUT -o tun+ -j ACCEPT
	$ sudo iptables -t nat -A POSTROUTING -s 20.172.0.0/24 -o eth0 -j MASQUERADE		$ sudo iptables -t nat -A POSTROUTING -s 20.172.0.0/24 -o eth0 -j MASQUERADE
	$ sudo iptables -I FORWARD -i tun0 -o eth0 -s 20.172.0.0/24 -d 10.0.0.0/24 -m conntrack --ctstate NEW -j ACCEPT		$ sudo iptables -I FORWARD -i tun0 -o eth0 -s 20.172.0.0/24 -d 10.9.9.0/24 -m conntrack --ctstate NEW -j ACCEPT
	$ sudo iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 1194 -j ACCEPT		$ sudo iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 1194 -j ACCEPT
	$ sudo iptables -A FORWARD -i tun+ -j ACCEPT		$ sudo iptables -A FORWARD -i tun+ -j ACCEPT

imported>Jacob at 21:48, 11 June 2019

2019-06-11T21:48:27Z

← Older revision		Revision as of 16:48, 11 June 2019
Line 2:		Line 2:
	Return [[Raspberry PI Knowledge Base]]		Return [[Raspberry PI Knowledge Base]]
	<span style="float:right;">		<span style="float:right;">
	Next [[Raspberry PI ~~Wifi~~]]		Next [[Raspberry PI WiFi]]
	</span></p><hr>		</span></p><hr>

imported>Jacob at 21:47, 11 June 2019

2019-06-11T21:47:32Z

← Older revision		Revision as of 16:47, 11 June 2019
Line 2:		Line 2:
	Return [[Raspberry PI Knowledge Base]]		Return [[Raspberry PI Knowledge Base]]
	<span style="float:right;">		<span style="float:right;">
	~~Return~~ [[Raspberry PI ~~Knowledge Base~~]]		Next [[Raspberry PI Wifi]]
	</span></p><hr>		</span></p><hr>

imported>Jawadmin at 21:55, 23 December 2018

2018-12-23T21:55:29Z

← Older revision		Revision as of 16:55, 23 December 2018
Line 4:		Line 4:
	Return [[Raspberry PI Knowledge Base]]		Return [[Raspberry PI Knowledge Base]]
	</span></p><hr>		</span></p><hr>

	~~<hr><p style="text align:left;">~~
	~~Return [[Main Page]]~~
	~~<span style="float:right;">~~
	~~Next [[MacOS Knowledge Base]]~~
	~~</span></p>~~

	Install openvpn		Install openvpn

imported>Jawadmin at 21:51, 23 December 2018

2018-12-23T21:51:55Z

← Older revision		Revision as of 16:51, 23 December 2018
Line 4:		Line 4:
	Return [[Raspberry PI Knowledge Base]]		Return [[Raspberry PI Knowledge Base]]
	</span></p><hr>		</span></p><hr>

	~~== Raspberry PI Knowledge Base ==~~
	* [[Raspberry PI VPN]]

	<hr><p style="text align:left;">		<hr><p style="text align:left;">

imported>Jawadmin at 21:50, 23 December 2018

2018-12-23T21:50:30Z

@@ Line 1: / Line 1: @@
-Raspberry PI VPN
+<hr><p style="text align:left;">
 Install openvpn
@@ Line 54: / Line 67: @@
 Now reboot
   $ sudo shutdown -h now

imported>Jawadmin at 15:23, 23 December 2018

2018-12-23T15:23:10Z

← Older revision		Revision as of 10:23, 23 December 2018
Line 7:		Line 7:
	Adjust /etc/openvpn/server.conf to reflect the local environment, for rapid see		Adjust /etc/openvpn/server.conf to reflect the local environment, for rapid see
	$ vim /etc/openvpn/serverl.conf		$ vim /etc/openvpn/serverl.conf
	/etc/openvpn/serverl.conf		[[/etc/openvpn/serverl.conf]]
	Routing is required enable this in sys control by changing /etc/openvpn/server.conf and activating it.		Routing is required enable this in sys control by changing /etc/openvpn/server.conf and activating it.
	$ sudo vim /etc/sysctl.conf		$ sudo vim /etc/sysctl.conf
	/etc/sysctl.conf		[[/etc/sysctl.conf]]

	Activate the change by executing:		Activate the change by executing:
Line 50:		Line 50:
	$ sudo cp rules.v4 /etc/iptables/		$ sudo cp rules.v4 /etc/iptables/
	The content of rules.v4 looks like this for rpi2:		The content of rules.v4 looks like this for rpi2:
	/etc/iptables/rules.v4		[[/etc/iptables/rules.v4]]

	Now reboot		Now reboot
	$ sudo shutdown -h now		$ sudo shutdown -h now

imported>Jawadmin at 15:20, 23 December 2018

2018-12-23T15:20:56Z

← Older revision		Revision as of 10:20, 23 December 2018
Line 45:		Line 45:

	Now install iptables-persistent, this will ask to save the existing rules in /etc/iptables/rules.v4, which will then be loaded at startup:		Now install iptables-persistent, this will ask to save the existing rules in /etc/iptables/rules.v4, which will then be loaded at startup:
	sudo apt-get install iptables-persistent		$ sudo apt-get install iptables-persistent
	If iptables-persistent is already installed, run iptables-save and copy the file to /etc/iptables/rules.v4		If iptables-persistent is already installed, run iptables-save and copy the file to /etc/iptables/rules.v4
	sudo iptables-save > rules.v4		$ sudo iptables-save > rules.v4
	sudo cp rules.v4 /etc/iptables/		$ sudo cp rules.v4 /etc/iptables/
	The content of rules.v4 looks like this for rpi2:		The content of rules.v4 looks like this for rpi2:
	/etc/iptables/rules.v4		/etc/iptables/rules.v4

	Now reboot		Now reboot
	sudo shutdown -h now		$ sudo shutdown -h now

imported>Jawadmin at 15:19, 23 December 2018

2018-12-23T15:19:35Z

imported>Jawadmin at 15:16, 23 December 2018

2018-12-23T15:16:19Z

← Older revision		Revision as of 10:16, 23 December 2018
Line 6:		Line 6:
	$ sudo apt-get install openvpn		$ sudo apt-get install openvpn
	Adjust /etc/openvpn/server.conf to reflect the local environment, for rapid see		Adjust /etc/openvpn/server.conf to reflect the local environment, for rapid see
	* /etc/openvpn/serverl.conf		$ vim /etc/openvpn/serverl.conf
			/etc/openvpn/serverl.conf
	Routing is required enable this in sys control by changing /etc/openvpn/server.conf and activating it.		Routing is required enable this in sys control by changing /etc/openvpn/server.conf and activating it.
	* $ sudo vim /etc/sysctl.conf		* $ sudo vim /etc/sysctl.conf

← Older revision		Revision as of 10:19, 23 December 2018
Line 9:		Line 9:
	/etc/openvpn/serverl.conf		/etc/openvpn/serverl.conf
	Routing is required enable this in sys control by changing /etc/openvpn/server.conf and activating it.		Routing is required enable this in sys control by changing /etc/openvpn/server.conf and activating it.
	* $ sudo vim /etc/sysctl.conf		$ sudo vim /etc/sysctl.conf
	* /etc/sysctl.conf		/etc/sysctl.conf

	Activate the change by executing:		Activate the change by executing:
	sudo sysctl -p		$ sudo sysctl -p

	Now set the firewall to allow traffic to be routed		Now set the firewall to allow traffic to be routed.
	First view existing entries in iptables		First view existing entries in iptables:
	sudo iptables -L		$ sudo iptables -L
	sudo iptables -t nat -L		$ sudo iptables -t nat -L
	Enter the iptables rules, for rpi2 this is:		Enter the iptables rules, for rpi2 this is:
	sudo iptables -A INPUT -i tun+ -j ACCEPT		$ sudo iptables -A INPUT -i tun+ -j ACCEPT
	sudo iptables -A OUTPUT -o tun+ -j ACCEPT		$ sudo iptables -A OUTPUT -o tun+ -j ACCEPT
	sudo iptables -t nat -A POSTROUTING -s 20.172.0.0/24 -o eth0 -j MASQUERADE		$ sudo iptables -t nat -A POSTROUTING -s 20.172.0.0/24 -o eth0 -j MASQUERADE
	sudo iptables -I FORWARD -i tun0 -o eth0 -s 20.172.0.0/24 -d 10.0.0.0/24 -m conntrack --ctstate NEW -j ACCEPT		$ sudo iptables -I FORWARD -i tun0 -o eth0 -s 20.172.0.0/24 -d 10.0.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
	sudo iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 1194 -j ACCEPT		$ sudo iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 1194 -j ACCEPT
	sudo iptables -A FORWARD -i tun+ -j ACCEPT		$ sudo iptables -A FORWARD -i tun+ -j ACCEPT
	sudo iptables -A FORWARD -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT		$ sudo iptables -A FORWARD -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
	sudo iptables -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT		$ sudo iptables -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT
	Check the content:		Check the content:
	sudo iptables -L		$ sudo iptables -L
	Chain INPUT (policy ACCEPT)		Chain INPUT (policy ACCEPT)
	target prot opt source destination		target prot opt source destination
	ACCEPT all -- anywhere anywhere		ACCEPT all -- anywhere anywhere
	ACCEPT udp -- anywhere anywhere state NEW udp dpt:openvpn		ACCEPT udp -- anywhere anywhere state NEW udp dpt:openvpn
	Chain FORWARD (policy ACCEPT)		Chain FORWARD (policy ACCEPT)
	target prot opt source destination		target prot opt source destination
	ACCEPT all -- 20.172.0.0/24 10.0.0.0/24 ctstate NEW		ACCEPT all -- 20.172.0.0/24 10.0.0.0/24 ctstate NEW
	ACCEPT all -- anywhere anywhere		ACCEPT all -- anywhere anywhere
	ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED		ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
	ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED		ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
	Chain OUTPUT (policy ACCEPT)		Chain OUTPUT (policy ACCEPT)
	target prot opt source destination		target prot opt source destination
	ACCEPT all -- anywhere anywhere		ACCEPT all -- anywhere anywhere

	Now install iptables-persistent, this will ask to save the existing rules in /etc/iptables/rules.v4, which will then be loaded at startup:		Now install iptables-persistent, this will ask to save the existing rules in /etc/iptables/rules.v4, which will then be loaded at startup: