Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 27 replies
  • Subscribers 2 subscribers
  • Views 39671 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro as a client to OpenVPN Server

maxbux
Hi everyone?
Just discovered I can’t trust the government and ISP with my data [:@]

I am looking into encrypting everything. I have a server running OpenVPN Access server on Amazon and can connect to it using its client.

Is it possible to create a VPN tunnel between Astaro and the OpenVPN server so that all traffic that leaves my LAN is encrypted? 

Something like this:



Thank you


This thread was automatically locked due to age.
  • 0
    Hi Ben83,

    I cant get this to work.
    Do you see a chance to provide us with a step by step instrution to get the PIA openvpn to work with Sophos UTM latest version?

    this are the PIA openvpn config file
    https://www.privateinternetaccess.com/openvpn/openvpn.zip

    thnx
  • 0
    openvpn on Sophos relies on certificate ca, some use only user/password (thats about how much i know about it) so that PIA openvpn might not be useable.
  • 0
    Oke thanks for the info.

    I hope Sophos will support the OpenVPN feature within the next releases.. This will make costumers and myself verrry heapppy ..

    For now i'm gonna use the ddwrt router to tunnel a OpenVPN from behind the UTM to somewhere (Of course , I prefer the Sophos UTM)
  • 0
    @xianx:  
    I hope Sophos will support the OpenVPN feature within the next releases
    New features are added for major releases, generally twice a year.  The primary factor for a feature add is that it must be something that has been requested by and will receive high utilization from numerous business (paid) license users.  Although Sophos allows home users to use UTM, all design considerations are based around business usage and paid licenses.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Atticka

    Hi,

    That's because the "ovpn to apc" script could not find the port number in your ovpn source file. This happens when the port number isn't specified in a dedicated "port" line but next to the host IP. Example :
    remote 212.129.33.61 443

    I've just corrected the problem by adding the following lines next to line 161, so the "RemPort" variable is taken from the "remote" line :

    (161)       RemPort=`grep "^port " ${OvpnFile} | cut -d ' ' -f2 |tr -d '\r\n'`
    (162)       if [ -z "${RemPort}" ]; then
    (163)           # Looks like port number isn't given in its specific line
    (164)           # Trying to catch port number from the "remote" line
    (165)           RemPort=`grep "^remote " ${OvpnFile} | cut -d ' ' -f3 |tr -d '\r\n'`
    (166)       fi

    To avoid "File Corrupt" issue when editing manually your port number within your converted pac file, you have to edit the apc file with a Hex editor, and edit the Hex Byte value preceding your port number. The Hex Byte value must be equal to the length of your port number value.

    For example :
    if your port number is 443, the length is 3 characters, you'll have :
    .. 03 followed by the Hex value of your port number : 34 34 33 (443), followed everytime by 0b 00 00 00 ..

    If your port number is 40000, the length is 5 characters, you'll have :
    .. 05 followed by 34 30 30 30 30 (40000), followed by 0b 00 00 00 ..

    Hope this will help.

  • 0 in reply to JohnSmith6

    Hi, John, and welcome to the UTM Community!

    Are you saying that you have successfully used ovpn-to-apc to create a client file that is currently connecting a UTM to a non-UTM OpenVPN server?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi,

    Actually no, I'm now stuck because my "ta_xxxxxx.key" file generated by the script is empty as my "FreeVPN" provider (freevpn.me) doesn't provide a <tls-auth> section in their .ovpn file :-(

    If you have an idea how I should work with .ovpn files provided by freevpn.me, let me know.

Unfiltered HTML