Re: [Openvpn-users] Dynamic NAT uses only the last IP Address in range

2015-09-22 Thread Nikolaos Milas
On 22/9/2015 8:22 μμ, debbie...@gmail.com wrote: > It is *not*$ifconfig_pool_local_ip > it *is*$ifconfig_pool_remote_ip > > and it is avaialble at --client-connet script execute Ah, yes, I checked again, you are quite right. This is the case. Thank you for this correction! Any and all additiona

[Openvpn-users] anyone get ChromeOS openvpn working?

2015-09-22 Thread Jason Haar
Hi there I've used the ONC documentation to create a ONC file for ChromeOS and used chrome://net-internals/#chromeos to import it in. The openvpn config contains tlsauth, client certs, CA certs, both udp and tcp and IgnoreDefaultRoute==true http://www.chromium.org/chromium-os/chromiumos-design-do

Re: [Openvpn-users] OpenVPN Reporting / Audit

2015-09-22 Thread Alan McKay
I should clarify - in the GUI I can of course see which users are in which groups. But there seems to be no easy way to copy and paste that information into the audit report I am writing. Also which groups have access which which networks. It would be nice to have canned reports. But failing

Re: [Openvpn-users] Dynamic NAT uses only the last IP Address in range

2015-09-22 Thread debbie10t
- Original Message - From: "Nikolaos Milas" To: Sent: Tuesday, September 22, 2015 3:03 PM Subject: Re: [Openvpn-users] Dynamic NAT uses only the last IP Address in range > I would also like to mention that the local_ip to use in the ip tables > statement should not be the $trusted_ip

[Openvpn-users] OpenVPN Reporting / Audit

2015-09-22 Thread Alan McKay
Hi folks, I want to be able to produce an audit for our server, and cannot seem to find any way other than the GUI to dump out some data. One easy example is - which VPN users are in which profile groups? I spent a good half hour googling and cannot seem to find anything. Is there any reportin

Re: [Openvpn-users] VPN server with no local end point

2015-09-22 Thread Gert Doering
Hi, On Tue, Sep 22, 2015 at 11:38:43AM -0400, Stefan Monnier wrote: > My typical OpenVPN configuration uses a TUN device with a subnet > topology with an IP range of AA.BB.CC.NN and a netmask of 255.255.255.0, > and in that configuration the server gets a local end point address of > AA.BB.CC.1. >

Re: [Openvpn-users] VPN server with no local end point

2015-09-22 Thread Simon Deziel
On 09/22/2015 11:38 AM, Stefan Monnier wrote: > How could I arrange that the local tun device doesn't get an IP address > at all, so that clients can talk to each other via the VPN, but can't > connect to the server via the VPN (only via the outside IP address > instead)? One simple way to prevent

[Openvpn-users] VPN server with no local end point

2015-09-22 Thread Stefan Monnier
My typical OpenVPN configuration uses a TUN device with a subnet topology with an IP range of AA.BB.CC.NN and a netmask of 255.255.255.0, and in that configuration the server gets a local end point address of AA.BB.CC.1. How could I arrange that the local tun device doesn't get an IP address at al

Re: [Openvpn-users] Dynamic NAT uses only the last IP Address in range

2015-09-22 Thread Nikolaos Milas
On 21/9/2015 6:17 μμ, Jan Just Keijser wrote: > A client-connect script would be a much better option in this case. > Unfortunately, there is no env var that contains the number of > connected clients. Remember that a lost client-connection does not > appear in the status/logs until the client