VPN setup

Forum Forums General Software VPN setup

Tagged: 

  • This topic has 6 replies, 5 voices, and was last updated Apr 16-2:31 pm by Girafenaine.
Viewing 7 posts - 1 through 7 (of 7 total)
  • Author
    Posts
  • #103819
    Member
    symbol

      Anyone knows what are the best way to set up VPN connection without systemD?

      I am trying to use providers as ProtoVPN or ZoogVPN, their official used systemD.

      Anyone knows the best option for Antix Linux? I previously used openconnect (Cisco) and it does not need systemD. Are other options better as PPTP or WireGuard?

      #104683
      Member
      blackcat7
        Helpful
        Up
        0
        ::

        I have Mullvad VPN, but I haven’t been able to get it to work. I’ve been trying everything I can think of but I’ve been unable to get it to install on antiX.

        First, I tried the package installer, then I tried installing the package downloaded from Mullvad, then I tried installing OpenVPN, and then I looked into Wireguard as well. I couldn’t figure out how to install it and get it to work. I think it has to do with the lack of systemd.

        By chance, I also have ExpressVPN subscription – it’s definitely not ideal, but it’s better than no VPN. It appears to be working.

        I installed the package through the package installer, then I installed the ExpressVPN extension on Firefox. The VPN works not just in the firefox browser, but outside of it.

        I tested the IP and it comes up with the location I selected. So if anyone is looking for a working VPN to use on antiX, ExpressVPN is currently working (at least it appears to be).

        #104686
        Moderator
        christophe
          Helpful
          Up
          1
          ::

          This is my current “poor man’s” VPN setup:
          https://www.antixforum.com/forums/topic/403-forbidden-error-on-antixforum-com-fix/

          Not the most convenient (I must start it from the terminal), but it works. And it’s free…

          confirmed antiX frugaler, since 2019

          #104688
          Member
          symbol
            Helpful
            Up
            0
            ::

            Yeah, I am using your solution and it works!

            most of the VPN uses openvpn I am just wondering if we can find tutorials on how to set up openvpn directly on antixlinux.

            This is my current “poor man’s” VPN setup:
            https://www.antixforum.com/forums/topic/403-forbidden-error-on-antixforum-com-fix/

            Not the most convenient (I must start it from the terminal), but it works. And it’s free…

            #104689
            Member
            symbol
              Helpful
              Up
              3
              ::

              I found a way to use openvpn directly.
              Install OpenVPN with

              
              sudo apt install openvpn
              

              Then download the a VPN config from the protonvpn (say jp-free-13.protonvpn.net.tcp.ovpn) and simply run

              
              sudo openvpn --config jp-free-13.protonvpn.net.tcp.ovpn
              
              • This reply was modified 3 weeks, 4 days ago by symbol.
              • This reply was modified 3 weeks, 4 days ago by symbol.
              #104700
              Member
              olsztyn
                Helpful
                Up
                0
                ::

                This is my current “poor man’s” VPN setup:
                https://www.antixforum.com/forums/topic/403-forbidden-error-on-antixforum-com-fix/
                Not the most convenient (I must start it from the terminal), but it works. And it’s free…

                Thank you Christophe…
                Worked fine in my test. Strangely, it seemed to retain the vpn’d IP address after closing the terminal window, where vpn connection was initialized.
                Not a problem, just unexpected…

                Also it appears to me anticapitalista (I assume) created an openvpn runit service. It does not seem to start but at least it appears that anticapitalista has been working on openvpn implementation in antiX…

                • This reply was modified 3 weeks, 3 days ago by olsztyn.

                Live antiX Boot Options (Previously posted by Xecure):
                https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parameters

                #104812
                Member
                Girafenaine
                  Helpful
                  Up
                  0
                  ::

                  Hello,

                  I use openvpn on a daily basis on MX Linux – fluxbox, with sysvinit as a init system.

                  With sysvinit the openvpn service works well. As christophe and symbol I use a .ovpn conf file (for proton vpn free service). But this conf file is in /etc/openvpn and is automatically read by the openvpn service at startup.

                  Important step : I had to install openresolv (and uninstall resolvconf) to get /etc/resolv.conf file properly handled. This file should either give the DNS server adress, or point to a file that does give it. resolvconf made it in the wrong way for me, which resulted in a non working connection. openresolv makes it properly.

                  I did not yet try with antiX runit version.

                  My own additions :
                  – in /etc/openvpn I have not only one but 4 conf files, 3 of them are disabled with «.disabled» suffix. With a short script, it let me change the protonvpn server (with a fluxbox key combo)
                  – I made an indicator in my tint2 bar to check whether openvpn service is running (and with which server)
                  – the vpn is used for the whole system. I wrote another script to open a «naked» broŵser if needed (some websites don’t work through proton VPN). The script uses firejail to launch a (private) browser session in its own network stack, without any vpn. It needs to temporarily switch off openvpn service to be able to connect directly to the web, then launch the «naked» browser session, then switch on openvpn service again. It works very well and can be fully integrated in fluxbox with key combos.
                  – I use ufw as a firewall and wrote simple rules that ensures that only exiting connections through the vpn are allowed (ufw default deny outgoing, and : ufw allow out on tun0 comment “openvpn global interface”). You have to allow connections to your VPN provider as well (ufw insert 1 allow out to 190.xxx.xxx.xxx port 1194,80,4569,5060,443 proto udp comment “ProtonVPN”). That’s some extra shield, as the openvpn service normally forces every connection through the vpn server.
                  – I modified the protonVN conf file by adding following lines :

                  #added for the vpn to reset itself when DHCP gives the PC another ip adress
                  persist-remote-ip
                  ipchange "/usr/bin/pkill -USR1 openvpn"
                  #added for the vpn to reset even after a long time without any connection
                  remap-usr1 SIGHUP
                  #following is useless if the vpn server does enable the --keep-alive option, which has the same effect as ping + ping-restart.
                  #Server parameters have priority on those of the client
                  ping 15
                  ping-restart 32
                  
                  #added for ease of use
                  auth-user-pass /path/to/passwold/file
                  
                  #added to automatically updates resolv-conf to use vpn DNS server (and back to initial DNS when vpn is closed)
                  #commented out if no use of resolvconf
                  script-security 2
                  up /etc/openvpn/update-resolv-conf
                  down /etc/openvpn/update-resolv-conf
                  
                  • This reply was modified 3 weeks, 1 day ago by Girafenaine.

                  Girafenaine
                  ----
                  Antix 19 - Fluxbox - Live USB stick and frugal / MX 19 - Fluxbox - Dell XPS 7590

                Viewing 7 posts - 1 through 7 (of 7 total)
                • You must be logged in to reply to this topic.