Gentoo Archives: gentoo-user

From: Timur Aydin <ta@××××××.org>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] VPN question
Date: Mon, 23 Dec 2013 17:46:49
Message-Id: 52B87671.5040200@taydin.org
In Reply to: Re: [gentoo-user] VPN question by Burak Arslan
1 On 12/23/13 18:24, Burak Arslan wrote:
2 > Once the VPN connection is established, among the routes pushed by your
3 > OpenVPN provider is also a default gateway entry which routes every
4 > non-local packet through the vpn.
5
6 Here is the routing setup after the tunnel is up:
7
8 bonsai ~ # /etc/init.d/openvpn start
9 * Starting openvpn
10 * WARNING: openvpn has started, but is inactive
11 bonsai ~ # ip route show
12 0.0.0.0/1 via 10.8.2.213 dev tun0
13 default via 92.44.0.41 dev ppp0 metric 4007
14 10.2.1.0/24 dev eno1 proto kernel scope link src 10.2.1.254
15 10.2.2.0/24 dev enp1s0 proto kernel scope link src 10.2.2.254
16 10.2.3.0/24 dev enp8s0 proto kernel scope link src 10.2.3.254
17 10.8.2.209 via 10.8.2.213 dev tun0 metric 1
18 10.8.2.213 dev tun0 proto kernel scope link src 10.8.2.214
19 92.44.0.41 dev ppp0 proto kernel scope link src 176.41.233.165
20 127.0.0.0/8 dev lo scope host
21 127.0.0.0/8 via 127.0.0.1 dev lo
22 128.0.0.0/1 via 10.8.2.213 dev tun0
23 173.195.6.91 via 92.44.0.41 dev ppp0
24
25 > Your daemons at home receive a packet via your static Turkish address
26 > but, because you got your default gw configured to be your vpn provider,
27 > the response packet goes through NY. Due to reverse-path filtering or
28 > some other fact of nature, it's dropped somewhere along the way.
29
30 > If that's the case (big if :)), here's what you need to do:
31 > http://lartc.org/lartc.html#AEN267
32
33 Thanks for this link! I will need some time to digest this information
34 and will report back with my progress.
35
36 --
37 Timur

Replies

Subject Author
Re: [gentoo-user] VPN question Mick <michaelkintzios@×××××.com>