Portanto, estou tendo um problema ao tentar conectar-me ao meu servidor OpenVPN que está sendo executado com o OBFSProxy com um cliente OpenVPN não oficial que permite conexões com o OBFSProxy. Ao tentar se conectar ao meu servidor, a conexão é concluída com sucesso, no entanto, não consigo acessar a Internet. Aqui está o meu arquivo de log do aplicativo: Screenshot
Minha configuração do OpenVPN:
dev tun
proto tcp-server
port 1194
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server_X4cRZPcfNNpg9p5e.crt
key /etc/openvpn/easy-rsa/pki/private/server_X4cRZPcfNNpg9p5e.key
dh /etc/openvpn/easy-rsa/pki/dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OPenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 10.2.0.0 255.255.240.0"
# Set your primary domain name server address for clients
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
keepalive 10 120
remote-cert-tls client
tls-version-min 1.2
tls-auth /etc/openvpn/easy-rsa/pki/ta.key 0
cipher AES-256-CBC
auth SHA256
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
log /var/log/openvpn.log
verb 4
# Generated for use by PiVPN.io
Configuração do cliente:
client
dev tun
proto udp
<connection>
remote [IP] 8080 tcp-client
obfsproxy-obfs2-new "[PASSWORD]"
</connection>
comp-lzo adaptive
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_X4cRZPcfNNpg9p5e name
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 1
tls-client
key-direction 1
<ca>
ifconfig:
ens3 Link encap:Ethernet HWaddr fa:16:3e:a1:28:66
inet addr:10.2.6.251 Bcast:10.2.15.255 Mask:255.255.240.0
inet6 addr: 2605:fd00:4:1001:f816:3eff:fea1:2866/64 Scope:Global
inet6 addr: fe80::f816:3eff:fea1:2866/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12134060 errors:0 dropped:21 overruns:0 frame:0
TX packets:3704911 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:2255699997 (2.2 GB) TX bytes:1096333145 (1.0 GB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:1533 errors:0 dropped:0 overruns:0 frame:0
TX packets:1533 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1
RX bytes:361577 (361.5 KB) TX bytes:361577 (361.5 KB)
tun1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.1 Mask:255.255.255.0
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:258 errors:0 dropped:0 overruns:0 frame:0
TX packets:270 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:18014 (18.0 KB) TX bytes:35745 (35.7 KB)
ps aux | grep openvpn
ubuntu@resonance:~$ ps aux | grep openvpn
root 352 0.0 0.0 53516 3992 pts/13 S+ Nov24 0:00 sudo openvpn --config server.conf
nobody 353 0.0 0.0 44144 6272 pts/13 S+ Nov24 0:30 openvpn --config server.conf
root 16184 0.0 0.0 53516 3984 pts/18 S+ 18:26 0:00 sudo nano /etc openvpn/server.conf
root 16185 0.0 0.0 21596 3648 pts/18 S+ 18:26 0:00 nano /etc/openvpn/server.conf
ubuntu 17020 0.0 0.0 12944 948 pts/19 S+ 18:50 0:00 grep --color=auto openvpn
Opções de lançamento do OBFSProxy:
obfsproxy --log-min-severity=info obfs2 --dest=127.0.0.1:1194 --shared-secret=[PASSWORD] server 0.0.0.0:8080
nano / etc / network / interfaces lê
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# Source interfaces
# Please check /etc/network/interfaces.d before changing this file
# as interfaces may have been defined in /etc/network/interfaces.d
# See LP: #1262951
source /etc/network/interfaces.d/*.cfg