Skip to content

Instantly share code, notes, and snippets.

@jippi
Last active August 29, 2015 13:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jippi/9932195 to your computer and use it in GitHub Desktop.
Save jippi/9932195 to your computer and use it in GitHub Desktop.
client
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
dev tap
proto tcp
remote 144.xx.xxx.60 9977
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
verb 3
mute 20
topology p2p
mssfix 1400
tun-mtu 1500
txqueuelen 1000
cipher none
-> ifconfig
eth0 Link encap:Ethernet HWaddr 04:01:15:53:3e:01
inet addr:188.xxx.xxx.36 Bcast:188.xxx.xxx.255 Mask:255.255.240.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:612970 errors:0 dropped:0 overruns:0 frame:0
TX packets:685317 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1640321790 (1.5 GiB) TX bytes:88152243 (84.0 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:443 errors:0 dropped:0 overruns:0 frame:0
TX packets:443 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:31262 (30.5 KiB) TX bytes:31262 (30.5 KiB)
tap0 Link encap:Ethernet HWaddr d2:58:9b:2e:48:44
inet addr:192.168.1.23 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:753510 errors:0 dropped:0 overruns:0 frame:0
TX packets:276634 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1015882266 (968.8 MiB) TX bytes:18755933 (17.8 MiB)
-> openvpn /etc/openvpn/client.conf
Wed Apr 2 11:15:38 2014 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Wed Apr 2 11:15:38 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Apr 2 11:15:38 2014 WARNING: file '/etc/openvpn/client.key' is group or others accessible
Wed Apr 2 11:15:38 2014 ******* WARNING *******: null cipher specified, no encryption will be used
Wed Apr 2 11:15:38 2014 Control Channel MTU parms [ L:1559 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Apr 2 11:15:38 2014 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed Apr 2 11:15:38 2014 Data Channel MTU parms [ L:1559 D:1400 EF:27 EB:4 ET:32 EL:0 AF:14/27 ]
Wed Apr 2 11:15:38 2014 Local Options hash (VER=V4): '8f7d9194'
Wed Apr 2 11:15:38 2014 Expected Remote Options hash (VER=V4): 'b347aa25'
Wed Apr 2 11:15:38 2014 Attempting to establish TCP connection with [AF_INET]144.xx.xxx.60:9977 [nonblock]
Wed Apr 2 11:15:39 2014 TCP connection established with [AF_INET]144.xx.xxx.60:9977
Wed Apr 2 11:15:39 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 2 11:15:39 2014 TCPv4_CLIENT link remote: [AF_INET]144.xx.xxx.60:9977
Wed Apr 2 11:15:39 2014 TLS: Initial packet from [AF_INET]144.xx.xxx.60:9977, sid=3d7fca7e 8a447c23
Wed Apr 2 11:15:39 2014 VERIFY OK: depth=1, /C=DK/ST=Seland/L=Copenhagen/O=bownty.com/CN=bownty.com_CA/emailAddress=tech@bownty.com
Wed Apr 2 11:15:39 2014 VERIFY OK: nsCertType=SERVER
Wed Apr 2 11:15:39 2014 VERIFY OK: depth=0, /C=DK/ST=Seland/L=Copenhagen/O=bownty.com/CN=server/emailAddress=tech@bownty.com
Wed Apr 2 11:15:39 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 2 11:15:39 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 2 11:15:39 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Apr 2 11:15:39 2014 [server] Peer Connection Initiated with [AF_INET]144.xx.xxx.60:9977
Wed Apr 2 11:15:41 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Apr 2 11:15:41 2014 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.1.1,socket-flags TCP_NODELAY,ifconfig 192.168.1.23 255.255.255.0'
Wed Apr 2 11:15:41 2014 OPTIONS IMPORT: --socket-flags option modified
Wed Apr 2 11:15:41 2014 Socket flags: TCP_NODELAY=1 succeeded
Wed Apr 2 11:15:41 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Apr 2 11:15:41 2014 OPTIONS IMPORT: route-related options modified
Wed Apr 2 11:15:41 2014 TUN/TAP device tap0 opened
Wed Apr 2 11:15:41 2014 TUN/TAP TX queue length set to 1000
Wed Apr 2 11:15:41 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 2 11:15:41 2014 /sbin/ifconfig tap0 192.168.1.23 netmask 255.255.255.0 mtu 1500 broadcast 192.168.1.255
Wed Apr 2 11:15:41 2014 Initialization Sequence Completed
mode server
client-config-dir /etc/openvpn/tunnel/client-configs
ca /etc/openvpn/tunnel/keys/ca.crt
cert /etc/openvpn/tunnel/keys/server.crt
key /etc/openvpn/tunnel/keys/server.key
dh /etc/openvpn/tunnel/keys/dh1024.pem
crl-verify /etc/openvpn/tunnel/crl.pem
proto tcp-server
port 9977
tls-server
group nogroup
user nobody
status tunnel/openvpn-status.log
dev tap0
local 144.xx.xxx.60
ifconfig-pool-persist tunnel/vpn-ipp.txt
server-bridge 192.168.1.1 255.255.255.0 192.168.1.3 192.168.1.255
topology p2p
client-to-client
tcp-nodelay
mssfix 1400
tun-mtu 1500
txqueuelen 1000
cipher none
-> ifconfig
br0 Link encap:Ethernet HWaddr 52:54:00:d9:8a:ff
inet addr:192.168.1.212 Bcast:192.168.1.255 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:19940 errors:0 dropped:0 overruns:0 frame:0
TX packets:5919 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1240743 (1.1 MiB) TX bytes:569479 (556.1 KiB)
eth0 Link encap:Ethernet HWaddr 52:54:00:3c:de:a2
inet addr:144.xx.xxx.60 Bcast:144.xx.xxx.60 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:835517 errors:0 dropped:0 overruns:0 frame:0
TX packets:402153 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:108163871 (103.1 MiB) TX bytes:1940479911 (1.8 GiB)
eth1 Link encap:Ethernet HWaddr 52:54:00:d9:8a:ff
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:375232 errors:0 dropped:0 overruns:0 frame:0
TX packets:551567 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1810465420 (1.6 GiB) TX bytes:37571702 (35.8 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:326 errors:0 dropped:0 overruns:0 frame:0
TX packets:326 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:21606 (21.0 KiB) TX bytes:21606 (21.0 KiB)
tap0 Link encap:Ethernet HWaddr 8a:40:ad:82:55:21
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:545627 errors:0 dropped:0 overruns:0 frame:0
TX packets:1404456 errors:0 dropped:11 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:37000387 (35.2 MiB) TX bytes:1878363519 (1.7 GiB)
-> openvpn /etc/openvpn/tunnel.conf
Wed Apr 2 11:15:31 2014 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Wed Apr 2 11:15:31 2014 WARNING: you are using user/group/chroot/setcon without persist-tun -- this may cause restarts to fail
Wed Apr 2 11:15:31 2014 WARNING: you are using user/group/chroot/setcon without persist-key -- this may cause restarts to fail
Wed Apr 2 11:15:31 2014 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Wed Apr 2 11:15:31 2014 WARNING: --keepalive option is missing from server config
Wed Apr 2 11:15:31 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Apr 2 11:15:31 2014 Note: cannot open tunnel/openvpn-status.log for WRITE
Wed Apr 2 11:15:31 2014 Note: cannot open tunnel/vpn-ipp.txt for READ/WRITE
Wed Apr 2 11:15:31 2014 ******* WARNING *******: null cipher specified, no encryption will be used
Wed Apr 2 11:15:31 2014 TUN/TAP device tap0 opened
Wed Apr 2 11:15:31 2014 GID set to nogroup
Wed Apr 2 11:15:31 2014 UID set to nobody
Wed Apr 2 11:15:31 2014 Listening for incoming TCP connection on [AF_INET]144.xx.xxx.60:9977
Wed Apr 2 11:15:31 2014 TCPv4_SERVER link local (bound): [AF_INET]144.xx.xxx.60:9977
Wed Apr 2 11:15:31 2014 TCPv4_SERVER link remote: [undef]
Wed Apr 2 11:15:31 2014 Initialization Sequence Completed
Wed Apr 2 11:15:33 2014 Re-using SSL/TLS context
Wed Apr 2 11:15:33 2014 TCP connection established with [AF_INET]188.xxx.xxx.36:55809
Wed Apr 2 11:15:33 2014 TCPv4_SERVER link local: [undef]
Wed Apr 2 11:15:33 2014 TCPv4_SERVER link remote: [AF_INET]188.xxx.xxx.36:55809
Wed Apr 2 11:15:34 2014 188.xxx.xxx.36:55809 [mysql03] Peer Connection Initiated with [AF_INET]188.xxx.xxx.36:55809
Wed Apr 2 11:15:36 2014 mysql03/188.xxx.xxx.36:55809 send_push_reply(): safe_cap=960
Wed Apr 2 11:15:36 2014 mysql03/188.xxx.xxx.36:55809 Connection reset, restarting [0]
Wed Apr 2 11:15:38 2014 Re-using SSL/TLS context
Wed Apr 2 11:15:38 2014 TCP connection established with [AF_INET]188.xxx.xxx.36:55810
Wed Apr 2 11:15:38 2014 TCPv4_SERVER link local: [undef]
Wed Apr 2 11:15:38 2014 TCPv4_SERVER link remote: [AF_INET]188.xxx.xxx.36:55810
Wed Apr 2 11:15:40 2014 188.xxx.xxx.36:55810 [mysql03] Peer Connection Initiated with [AF_INET]188.xxx.xxx.36:55810
Wed Apr 2 11:15:41 2014 mysql03/188.xxx.xxx.36:55810 send_push_reply(): safe_cap=960
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment