Choose style:

Author Topic: How To Install and Use OpenVPN - VPNBook  (Read 6134 times)

0 Members and 1 Guest are viewing this topic.

Offline GNULINUX

  • Trusted User
  • Member
  • *****
  • Posts: 987
  • Karma: 311
    • View Profile
  • Peppermint version(s): Peppermint Six (x64)
How To Install and Use OpenVPN - VPNBook
« on: August 10, 2016, 01:02:02 pm »
How To Install and Use OpenVPN: VPNBook

This tutorial shows you how to install and use OpenVPN from the command line.
I'm using a free VPN service with no GUI/Client so everyone can test this out and hopefully learn something.
Confirmed working on Peppermint 6 & 7



How to install:

Update the package cache:
Code: [Select]
sudo apt-get update
Install OpenVPN:
Code: [Select]
sudo apt-get install openvpn


VPN provider:

Browse to VPNBook (Free and no account needed!)
Code: [Select]
http://www.vpnbook.com/


  1 :  Click on OpenVPN



  2 :  Download a Server OpenVPN Certificate Bundle
  3 :  Save the Username and Password, you will need it later on
The password is changed every few days so check on the site if it doesn't work anymore!



  4 :  Browse to the downloaded Server OpenVPN Certificate Bundle
Right click the .zip and choose Extract Here



  5 :  You now should see a new folder with .ovpn- files in it


How to use OpenVPN from the command line:

Open a terminal and change directory to the path where the configuration (.ovpn) files are:
Code: [Select]
cd /home/user/VPN/VPNBook.com-OpenVPN-Euro1/
Start OpenVPN with an .ovpn-file:
Code: [Select]
sudo openvpn vpnbook-euro1-tcp80.ovpn
The path and name of the .ovpn-file must be adjusted to your own situation!
Tip: Open a Nemo window so you can copy/paste the path and name of the .ovpn-file.

Fill in your (sudo)password and the VPNBook username and password that you have saved earlier.
The VPN should now start connecting.
Initialization Sequence Completed means that your (VPN) connection is established and ready to use!

You can disconnect the VPN connection by using the magical keyboard combination Ctrl+C   ;D

Example output:
Spoiler (click here to view / hide)
user@PPM7 ~ $ cd /home/user/VPN/VPNBook.com-OpenVPN-Euro1/
user@PPM7 ~/VPN/VPNBook.com-OpenVPN-Euro1 $ sudo openvpn vpnbook-euro1-tcp80.ovpn
[sudo] password for user:
Wed Aug 10 15:17:44 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb  2 2016
Wed Aug 10 15:17:44 2016 library versions: OpenSSL 1.0.2g-fips  1 Mar 2016, LZO 2.08
Enter Auth Username: *******
Enter Auth Password: ********
Wed Aug 10 15:18:11 2016 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Aug 10 15:18:11 2016 NOTE: --fast-io is disabled since we are not using UDP
Wed Aug 10 15:18:11 2016 Socket Buffers: R=[87380->87380] S=[16384->16384]
Wed Aug 10 15:18:11 2016 Attempting to establish TCP connection with [AF_INET]176.126.237.217:80 [nonblock]
Wed Aug 10 15:18:12 2016 TCP connection established with [AF_INET]176.126.237.217:80
Wed Aug 10 15:18:12 2016 TCPv4_CLIENT link local: [undef]
Wed Aug 10 15:18:12 2016 TCPv4_CLIENT link remote: [AF_INET]176.126.237.217:80
Wed Aug 10 15:18:15 2016 TLS: Initial packet from [AF_INET]176.126.237.217:80, sid=a580984c 2db3da15
Wed Aug 10 15:18:15 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Aug 10 15:18:15 2016 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com
Wed Aug 10 15:18:15 2016 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com
Wed Aug 10 15:18:16 2016 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Aug 10 15:18:16 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 10 15:18:16 2016 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Aug 10 15:18:16 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 10 15:18:16 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Aug 10 15:18:16 2016 [vpnbook.com] Peer Connection Initiated with [AF_INET]176.126.237.217:80
Wed Aug 10 15:18:18 2016 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1)
Wed Aug 10 15:18:18 2016 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS  89.233.43.71,dhcp-option DNS  91.239.100.100,route 10.12.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.12.1.118 10.12.1.117'
Wed Aug 10 15:18:18 2016 OPTIONS IMPORT: timers and/or timeouts modified
Wed Aug 10 15:18:18 2016 OPTIONS IMPORT: --ifconfig/up options modified
Wed Aug 10 15:18:18 2016 OPTIONS IMPORT: route options modified
Wed Aug 10 15:18:18 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Aug 10 15:18:18 2016 ROUTE_GATEWAY 10.0.2.2/255.255.255.0 IFACE=enp0s3 HWADDR=08:00:27:08:5c:e8
Wed Aug 10 15:18:18 2016 TUN/TAP device tun3 opened
Wed Aug 10 15:18:18 2016 TUN/TAP TX queue length set to 100
Wed Aug 10 15:18:18 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Aug 10 15:18:18 2016 /sbin/ip link set dev tun3 up mtu 1500
Wed Aug 10 15:18:18 2016 /sbin/ip addr add dev tun3 local 10.12.1.118 peer 10.12.1.117
Wed Aug 10 15:18:20 2016 /sbin/ip route add 176.126.237.217/32 via 10.0.2.2
Wed Aug 10 15:18:20 2016 /sbin/ip route add 0.0.0.0/1 via 10.12.1.117
Wed Aug 10 15:18:20 2016 /sbin/ip route add 128.0.0.0/1 via 10.12.1.117
Wed Aug 10 15:18:20 2016 /sbin/ip route add 10.12.0.1/32 via 10.12.1.117
Wed Aug 10 15:18:20 2016 Initialization Sequence Completed
^CWed Aug 10 15:20:50 2016 event_wait : Interrupted system call (code=4)
Wed Aug 10 15:20:50 2016 /sbin/ip route del 10.12.0.1/32
Wed Aug 10 15:20:50 2016 /sbin/ip route del 176.126.237.217/32
Wed Aug 10 15:20:50 2016 /sbin/ip route del 0.0.0.0/1
Wed Aug 10 15:20:50 2016 /sbin/ip route del 128.0.0.0/1
Wed Aug 10 15:20:50 2016 Closing TUN/TAP interface
Wed Aug 10 15:20:50 2016 /sbin/ip addr del dev tun3 local 10.12.1.118 peer 10.12.1.117
Wed Aug 10 15:20:50 2016 SIGINT[hard,] received, process exiting
user@PPM7 ~/VPN/VPNBook.com-OpenVPN-Euro1 $
[close]




Automatic login (VPN username & VPN password): (Optional)

Tired of typing your login and password every time you use the VPN service?

Open Nemo at the location of your .ovpn-files:



  1 :  Right click on an empty space in the window and choose Create New Document - Empty Document
Name the new file auth
  2 :  Right click the auth-file and choose Open With Gedit/Pluma
Add the VPN login and the password on a different line and save the file



  3 :  Right click the .ovpn-file and choose Open With Gedit/Pluma
  4 :  Change auth-user-pass to auth-user-pass auth and save the file

You are now ready to run the VPN with the same commands as mentioned in "How to use OpenVPN from the command line".
No need to type the login and password!

Example output:
Spoiler (click here to view / hide)
user@PPM7 ~ $ cd /home/user/VPN/VPNBook.com-OpenVPN-Euro1/
user@PPM7 ~/VPN/VPNBook.com-OpenVPN-Euro1 $ sudo openvpn vpnbook-euro1-tcp80.ovpn
[sudo] password for user:
Thu Aug 11 00:55:41 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb  2 2016
Thu Aug 11 00:55:41 2016 library versions: OpenSSL 1.0.2g-fips  1 Mar 2016, LZO 2.08
Thu Aug 11 00:55:41 2016 WARNING: file 'auth' is group or others accessible
Thu Aug 11 00:55:41 2016 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Aug 11 00:55:41 2016 NOTE: --fast-io is disabled since we are not using UDP
Thu Aug 11 00:55:41 2016 Socket Buffers: R=[87380->87380] S=[16384->16384]
Thu Aug 11 00:55:41 2016 Attempting to establish TCP connection with [AF_INET]176.126.237.217:80 [nonblock]
Thu Aug 11 00:55:42 2016 TCP connection established with [AF_INET]176.126.237.217:80
Thu Aug 11 00:55:42 2016 TCPv4_CLIENT link local: [undef]
Thu Aug 11 00:55:42 2016 TCPv4_CLIENT link remote: [AF_INET]176.126.237.217:80
Thu Aug 11 00:55:42 2016 TLS: Initial packet from [AF_INET]176.126.237.217:80, sid=86630623 c509956e
Thu Aug 11 00:55:42 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Aug 11 00:55:43 2016 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com
Thu Aug 11 00:55:43 2016 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com
Thu Aug 11 00:55:44 2016 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 11 00:55:44 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 11 00:55:44 2016 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 11 00:55:44 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 11 00:55:44 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Aug 11 00:55:44 2016 [vpnbook.com] Peer Connection Initiated with [AF_INET]176.126.237.217:80
Thu Aug 11 00:55:46 2016 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1)
Thu Aug 11 00:55:46 2016 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS  89.233.43.71,dhcp-option DNS  91.239.100.100,route 10.12.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.12.0.118 10.12.0.117'
Thu Aug 11 00:55:46 2016 OPTIONS IMPORT: timers and/or timeouts modified
Thu Aug 11 00:55:46 2016 OPTIONS IMPORT: --ifconfig/up options modified
Thu Aug 11 00:55:46 2016 OPTIONS IMPORT: route options modified
Thu Aug 11 00:55:46 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Aug 11 00:55:46 2016 ROUTE_GATEWAY 10.0.2.2/255.255.255.0 IFACE=enp0s3 HWADDR=08:00:27:08:5c:e8
Thu Aug 11 00:55:46 2016 TUN/TAP device tun3 opened
Thu Aug 11 00:55:46 2016 TUN/TAP TX queue length set to 100
Thu Aug 11 00:55:46 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 11 00:55:46 2016 /sbin/ip link set dev tun3 up mtu 1500
Thu Aug 11 00:55:46 2016 /sbin/ip addr add dev tun3 local 10.12.0.118 peer 10.12.0.117
Thu Aug 11 00:55:48 2016 /sbin/ip route add 176.126.237.217/32 via 10.0.2.2
Thu Aug 11 00:55:48 2016 /sbin/ip route add 0.0.0.0/1 via 10.12.0.117
Thu Aug 11 00:55:48 2016 /sbin/ip route add 128.0.0.0/1 via 10.12.0.117
Thu Aug 11 00:55:48 2016 /sbin/ip route add 10.12.0.1/32 via 10.12.0.117
Thu Aug 11 00:55:48 2016 Initialization Sequence Completed
^CThu Aug 11 00:56:19 2016 event_wait : Interrupted system call (code=4)
Thu Aug 11 00:56:19 2016 /sbin/ip route del 10.12.0.1/32
Thu Aug 11 00:56:19 2016 /sbin/ip route del 176.126.237.217/32
Thu Aug 11 00:56:19 2016 /sbin/ip route del 0.0.0.0/1
Thu Aug 11 00:56:19 2016 /sbin/ip route del 128.0.0.0/1
Thu Aug 11 00:56:19 2016 Closing TUN/TAP interface
Thu Aug 11 00:56:19 2016 /sbin/ip addr del dev tun3 local 10.12.0.118 peer 10.12.0.117
Thu Aug 11 00:56:19 2016 SIGINT[hard,] received, process exiting
user@PPM7 ~/VPN/VPNBook.com-OpenVPN-Euro1 $
[close]



Automatic VPN login and connection at boot (for every user): (Optional)

Users who always want to use their VPN can start it at boot (for every user) by following the next steps.

Follow steps 1,2,3 and 4 as described in "Automatic login (VPN username & VPN password)" and open Nemo at the location of the auth and .ovpn files.



  1 :  Right click the .ovpn-file and choose Rename...
Change the .ovpn-extension to a .conf-extension and copy the auth and .conf-file
  2 :  Open /etc/openvpn/ and right click on an empty space in it and choose Open as Root
Paste the auth and .conf-file to /etc/openvpn/

At this point RESTART your system, an OpenVPN service restart did not do the trick on my system...

Every user should now be connected to the VPN!



  3 :  You can test if it's working by typing ifconfig in the terminal, the output should show a tun3 device
Code: [Select]
ifconfig
  4 :  You can also visit one of the many "What is my IP?" sites, here I used DNS leak test


If you want to stop, start or restart the VPN, use following commands:
Code: [Select]
sudo service openvpn stop
Code: [Select]
sudo service openvpn start
Code: [Select]
sudo service openvpn restart
Important Note:
If one user disables the VPN it's disabled for every user if you use a normal user switch ("Logout-Login" or "Switch User")!
You have to manually start the VPN service (or reboot the system) to get the VPN running again!



This tutorial should also work with VPN providers who have separate cert/key-files as long as you put them in the same directory as the .ovpn/.conf-file!

Useful link for checking your IP: What is my IP address?

Enjoy your Peppermint!  8)
« Last Edit: August 23, 2016, 06:37:52 pm by GNULINUX »
Peppermint 6  (x64)   -   Windows 7 Ultimate SP1  (x64)
Running different OS flavors in VirtualBox, just for fun!

Offline Slim.Fatz

  • Trusted User
  • Veteran
  • *****
  • Posts: 1779
  • Karma: 470
  • Where's the mouse?
    • View Profile
  • Peppermint version(s): Peppermint 7, 8.5 & 10 - 64bit
Re: How To Install and Use OpenVPN - VPNBook
« Reply #1 on: August 10, 2016, 01:56:46 pm »
Hi GNULINUX,

Very nice tutorial !!  8) I will be trying it out as soon as I get back from a trip out of town.

Regards,

-- Slim
"Life first -- Peppermint a close 2nd!" -- Zeb

Tread lightly: Fluxbox, JWM, i3, Openbox, awesome

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 25725
  • Karma: 2822
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 8R, 9, and 9R
Re: How To Install and Use OpenVPN - VPNBook
« Reply #2 on: August 10, 2016, 02:09:09 pm »
Do you want this tunnel to auto-connect at every boot .. for all user accounts ?

if so, post the contents of the .ovpn file
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline GNULINUX

  • Trusted User
  • Member
  • *****
  • Posts: 987
  • Karma: 311
    • View Profile
  • Peppermint version(s): Peppermint Six (x64)
Re: How To Install and Use OpenVPN - VPNBook
« Reply #3 on: August 10, 2016, 04:10:35 pm »
^ I know how to start it without asking for a username and a password but would need to consult DuckDuckGo/Google to get it auto-starting/connecting for the current user or for all users... the sudo would be my problem...

So please go for it, I'll add it to the first post!  :)



The part of vpnbook-euro1-tcp80.ovpn you need:
Spoiler (click here to view / hide)
client

dev tun3

proto tcp

remote 176.126.237.217 80

remote euro217.vpnbook.com 80

resolv-retry infinite

nobind

persist-key

persist-tun

auth-user-pass  :P #insert auth file name here#  :P

comp-lzo

verb 3

cipher AES-128-CBC

fast-io

pull

route-delay 2

redirect-gateway
[close]

If you need the complete vpnbook-euro1-tcp80.ovpn for testing: Click! (it's in the .zip)

The auth file, ready to use:
Spoiler (click here to view / hide)
vpnbook
yaFr8mux
[close]


Greets!  ;)
Peppermint 6  (x64)   -   Windows 7 Ultimate SP1  (x64)
Running different OS flavors in VirtualBox, just for fun!

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 25725
  • Karma: 2822
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 8R, 9, and 9R
Re: How To Install and Use OpenVPN - VPNBook
« Reply #4 on: August 10, 2016, 07:43:11 pm »
You must first have already installed openvpn before continuing below, so if you haven't already, run
Code: [Select]
sudo apt-get install openvpn
Now place the FULL:-

vpnbook-euro1-tcp80.ovpn

file (from the .zip archive) into your:-

/etc/openvpn

directory, and rename it to:-

vpnbook-euro1-tcp80.conf

now edit:
Code: [Select]
sudo pluma /etc/openvpn/vpnbook-euro1-tcp80.conf
and change the line:-

auth-user-pass

to:-

auth-user-pass vpnbook-auth.txt

SAVE the file and exit pluma

Now create the file
Code: [Select]
sudo pluma /etc/openvpn/vpnbook-auth.txt

and make it contain just the 2 lines from your auth file .. SAVE it and exit pluma.

now run
Code: [Select]
sudo service openvpn restart
and wait a few seconds for the connection to come up

running (after a few seconds)
Code: [Select]
ifconfig
should show a tun3 device .. if not wait a few seconds longer and run it again

then going to
http://whatismyipaddress.com/
should show your IP as 176.126.237.217

Notes -

The VPN should automagically be running when you boot

You can stop it with
Code: [Select]
sudo service openvpn stop
you can start it with
Code: [Select]
sudo service openvpn start
or restart it with
Code: [Select]
sudo service openvpn restart
did that lot make sense ?
« Last Edit: August 10, 2016, 08:31:58 pm by PCNetSpec »
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline GNULINUX

  • Trusted User
  • Member
  • *****
  • Posts: 987
  • Karma: 311
    • View Profile
  • Peppermint version(s): Peppermint Six (x64)
Re: How To Install and Use OpenVPN - VPNBook
« Reply #5 on: August 10, 2016, 08:51:12 pm »
Seems we both were busy at the same time...  ;D

I already made the part that I knew and added it as "Automatic login (VPN username & VPN password)".

About the automatic start at boot: Yep, that makes sense!
I'm going to "adapt" your commands so they fit the rest of the tutorial and then add them.

One question: This will make the VPN run for all users I suppose, how would you make the VPN start for the current user only?

Thanks for your input!  ;)
Peppermint 6  (x64)   -   Windows 7 Ultimate SP1  (x64)
Running different OS flavors in VirtualBox, just for fun!

Offline Todd

  • nOOb
  • *
  • Posts: 18
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 7
Re: How To Install and Use OpenVPN - VPNBook
« Reply #6 on: August 10, 2016, 09:02:50 pm »
This is great. But for noobs...it's a lot to get your head around. Now I know why they create VPN services..lol
Did you guys go to school to learn coding? or is all this self taught..wow.

Offline GNULINUX

  • Trusted User
  • Member
  • *****
  • Posts: 987
  • Karma: 311
    • View Profile
  • Peppermint version(s): Peppermint Six (x64)
Re: How To Install and Use OpenVPN - VPNBook
« Reply #7 on: August 10, 2016, 09:11:40 pm »
This is great. But for noobs...it's a lot to get your head around. Now I know why they create VPN services..lol
Step by step...  ;)

Did you guys go to school to learn coding? or is all this self taught..wow.
PCNetspec was born that way and we mortals all learn from him!  :))
Peppermint 6  (x64)   -   Windows 7 Ultimate SP1  (x64)
Running different OS flavors in VirtualBox, just for fun!

Offline PCNetSpec

  • Administrator
  • Hero
  • *****
  • Posts: 25725
  • Karma: 2822
  • "-rw-rw-rw-" .. The Number Of The Beast
    • View Profile
    • PCNetSpec
  • Peppermint version(s): Peppermint 8R, 9, and 9R
Re: How To Install and Use OpenVPN - VPNBook
« Reply #8 on: August 11, 2016, 08:22:08 am »
LOL .. I wish I was :))
WARNING: You are logged into reality as 'root' .. logging in as 'insane' is the only safe option.

Team Peppermint
PCNetSpec

Offline Kyle

  • Member
  • ***
  • Posts: 140
  • Karma: 13
  • Microshaft cannot compete...
    • View Profile
  • Peppermint version(s): 7 (x64)
Re: How To Install and Use OpenVPN - VPNBook
« Reply #9 on: August 11, 2016, 09:31:07 am »
Great tutorial! But please, use caution when using free VPN services. The end user has no way of knowing if their internet activity is being logged, that is something only the provider knows.
[] Dell Latitude E6400 []
[] CPU: Intel Core 2 Duo P8600 [] RAM: 4GB DDR2 [] HDD: 1TB 5400RPM WD Black []

Offline GNULINUX

  • Trusted User
  • Member
  • *****
  • Posts: 987
  • Karma: 311
    • View Profile
  • Peppermint version(s): Peppermint Six (x64)
Re: How To Install and Use OpenVPN - VPNBook
« Reply #10 on: August 11, 2016, 12:35:00 pm »
Thanks Kyle,
You're right, VPN's (free AND paid for) are always a matter of trust!  ;)

This tutorial isn't really about VPNBook but about OpenVPN. I just needed an example VPN that was accessible for everyone. VPNBook was my choice because it's free, offers a nearly 100% up-time and uses OpenVPN. Everybody can use this tutorial to get their first VPN running (with VPNBook) and decide afterwards which VPN provider (with OpenVPN) they're going to use.

Greets!
Peppermint 6  (x64)   -   Windows 7 Ultimate SP1  (x64)
Running different OS flavors in VirtualBox, just for fun!

Offline Kyle

  • Member
  • ***
  • Posts: 140
  • Karma: 13
  • Microshaft cannot compete...
    • View Profile
  • Peppermint version(s): 7 (x64)
Re: How To Install and Use OpenVPN - VPNBook
« Reply #11 on: August 11, 2016, 09:20:53 pm »
Thanks Kyle,
You're right, VPN's (free AND paid for) are always a matter of trust!  ;)

This tutorial isn't really about VPNBook but about OpenVPN. I just needed an example VPN that was accessible for everyone. VPNBook was my choice because it's free, offers a nearly 100% up-time and uses OpenVPN. Everybody can use this tutorial to get their first VPN running (with VPNBook) and decide afterwards which VPN provider (with OpenVPN) they're going to use.

Greets!

You did the right thing, no worries. The only thing I can suggest to anyone interested in using a VPN is for them to get a VPS and set up OpenVPN on there. There are a couple OpenVPN setup scripts that require basic knowledge to use and can be installed on popular server distributions (such as Ubuntu/Debian and CentOS). Doing this allows you to have full control over your server and plus you can use the server for anything else you wish (webserver(s), gameserver(s), etc.) it's usually cheaper, too. OVH is a good provider for this.
[] Dell Latitude E6400 []
[] CPU: Intel Core 2 Duo P8600 [] RAM: 4GB DDR2 [] HDD: 1TB 5400RPM WD Black []

Offline Todd

  • nOOb
  • *
  • Posts: 18
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 7
Re: How To Install and Use OpenVPN - VPNBook
« Reply #12 on: August 12, 2016, 01:57:00 am »
Hi Kyle, Not sure about doing that for myself as the server company has all your details and can be tracked back to you can't it?

I would basically want to be as anonymous as possible.. otherwise.. no point really in doing all this is there?
I would want to even use a disposable credit card or one use debit card.
I could be wrong though.

Todd
« Last Edit: August 12, 2016, 02:03:34 am by Todd »

Offline Kyle

  • Member
  • ***
  • Posts: 140
  • Karma: 13
  • Microshaft cannot compete...
    • View Profile
  • Peppermint version(s): 7 (x64)
Re: How To Install and Use OpenVPN - VPNBook
« Reply #13 on: August 12, 2016, 09:35:23 am »
Hi Kyle, Not sure about doing that for myself as the server company has all your details and can be tracked back to you can't it?

I would basically want to be as anonymous as possible.. otherwise.. no point really in doing all this is there?
I would want to even use a disposable credit card or one use debit card.
I could be wrong though.

Todd

Complete anonymity on the Internet is impossible, it's just the way the Internet works (basic networking). It all comes down to what you are going to need to be anonymous for, if you are just doing everyday browsing, occasional downloading of torrent(s), etc. then a VPS should suffice. But if you want to achieve greater "anonymity" you could always use Tor along with a commercial VPN service (or your own, self hosted on a VPS). There is some concern that Tor may be deanonymized, and in some instances it has happened, although it has proven to be somewhat unreliable and a rare occurrence. It all depends on your threat model. I find it a good idea to use a "NAT" VPS provider (it's a shared IPv4 that you get 20 ports free to do as you wish with, and one dedicated for SSH) that is cheaper than a traditional VPS and it is much cheaper and there are likely (at least) 100+ VPS hosted behind each IP, so in a sense, it is a VPN on top of a VPN. But whether you choose to use a commercial VPN service or self host, remember to use HTTPS Everywhere, it is very important. Many sites have the option to use SSL, but don't have it accessible by default. HTTPS Everywhere, will check if there is a HTTPS version of the site you are trying to visit, if there is it will connect you to the HTTPS version. This is very important, because if the datacenter/VPN provider is logging, you will be much safer as they will not be able to get any of your information that you input on SSL websites because SSL certificates are stored in the browser. Essentially, you are just passing through already encrypted traffic back and forth to the website you are visiting.
[] Dell Latitude E6400 []
[] CPU: Intel Core 2 Duo P8600 [] RAM: 4GB DDR2 [] HDD: 1TB 5400RPM WD Black []

Offline Todd

  • nOOb
  • *
  • Posts: 18
  • Karma: 2
  • New Forum User
    • View Profile
  • Peppermint version(s): 7
Re: How To Install and Use OpenVPN - VPNBook
« Reply #14 on: August 13, 2016, 08:02:09 am »
Thanks for the comments Kyle. I suppose you are still susceptible to the VPS company/host revealing your info with a court order etc... if they get the IP etc? Or is it easy to set it up to be totally anonymous like a VPN service that does not keep logs?
I was looking at airvpn they seem to be good all round from the reviews. No logging is a biggie. Then making sure there are no DNS leaks via the UFW (firewall). Setting it all up manually without a VPN service is a bit daunting to noobies. At least for the moment anyway.
« Last Edit: August 13, 2016, 08:32:57 am by Todd »