Bonjour,

J'ai installé un vpn avec openvpn sur un debian qui me sert de serveur, le vpn est actif mais je ne le vois pas quand je fais la commande netstat -uap | grep 'openvpn'

# service openvpn status

Activate: active (exited) 
starting openvpn service...
started openvpn serivce...

 server.conf

port 443
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3

J'ai rajouté cela dans le fichier /etc/ufw/before.rules

# START OPENVPN RULES
# NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
# Allow traffic from OpenVPN client to eth0
-A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE
COMMIT
# END OPENVPN RULES

# ufw allow 443/udp
# ufw status

To Action From
22 ALLOW Anywhere
443/udp ALLOW Anywhere
22 (v6) ALLOW Anywhere (v6)
443/udp (v6) ALLOW Anywhere (v6)

client.ovpn

client
dev tun
proto udp
remote x.x.x.x 443
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3

le client est une machine windows 10 j'ai donc mis les fichiers

• client.crt
• client.key
• client.ovpn
• ca.crt

dans le dossier C:\Program Files\OpenVPN\config

quand je lance openvpn sur le windows j'obtiens cela:

Wed Mar 22 04:20:28 2017 NOTE: --user option is not implemented on Windows
Wed Mar 22 04:20:28 2017 NOTE: --group option is not implemented on Windows
Wed Mar 22 04:20:28 2017 OpenVPN 2.3.14 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Feb  1 2017
Wed Mar 22 04:20:28 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Mar 22 04:20:28 2017 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
Wed Mar 22 04:20:28 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Mar 22 04:20:28 2017 Need hold release from management interface, waiting...
Wed Mar 22 04:20:29 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Mar 22 04:20:29 2017 MANAGEMENT: CMD 'state on'
Wed Mar 22 04:20:29 2017 MANAGEMENT: CMD 'log all on'
Wed Mar 22 04:20:29 2017 MANAGEMENT: CMD 'hold off'
Wed Mar 22 04:20:29 2017 MANAGEMENT: CMD 'hold release'
Wed Mar 22 04:20:29 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Mar 22 04:20:29 2017 UDPv4 link local: [undef]
Wed Mar 22 04:20:29 2017 UDPv4 link remote: [AF_INET]192.168.1.29:443
Wed Mar 22 04:20:29 2017 MANAGEMENT: >STATE:1490142029,WAIT,,,

-
Edité par soraka 23 mars 2017 à 17:46:03