Darrick,
I added the tun+ entry you describe and opened port 1194 for udp in the same
manner as I have for port 5060. I too am using Arno's firewall.
Afterwards, I could not receive inbound SIP calls. I switched back to ASTFW
until I can work on this again. Any suggestions?
On Sun, Apr 20, 2008 at 2:28 PM, Tom Lynn <[EMAIL PROTECTED]> wrote:
> Thanks, Darrick,
> I'll try to proceed from here. It's pretty new stuff for me. I come from
> the telecoms side.
>
>
> On Sun, Apr 20, 2008 at 2:25 PM, Darrick Hartman (lists) <
> [EMAIL PROTECTED]> wrote:
>
>> Tom Lynn wrote:
>> > Does anybody have an example config for using OpenVPN for remote
>> > access. I'm using Astlinux as my home router and I'm looking for a
>> > secure way to access my home network while at work or away with
>> > business travel.
>> >
>> > I'll be using a Windows client.
>> >
>> > I tried the mini-howto on the OpenVPN.net website, but got hung up
>> > because the Tap-WIN driver requires a subnet mask of 255.255.255.252
>> > , which would seem to allow only two hosts. My home network has a
>> > subnet mask of 255.255.255.0 which supports at least five hosts at
>> > this time.
>>
>> Tom,
>>
>> That's not entirely accurate. Look at the client/server example here.
>>
>> http://openvpn.net/index.php/documentation/howto.html#examples
>>
>> The server sets up an address pool that must be different from your lan
>> ip addresses (I use 192.168.15.0/255.255.255.0). It will take 4
>> addresses per openvpn connection. (so the netmask could limit how many
>> clients you have available). By default, we're setup to follow the
>> client server example which specifies a netmask of 255.255.255.0.
>>
>> The openvpn client config is pretty straight-forward. I don't have my
>> windows workstation booted right now, but if you are not able to figure
>> it out with these comments, let me know and I can post an example.
>>
>> You'll also need to open up port 1194 (udp). I have not used openvpn
>> with astfw, only arno's fw. In arno's fw, there's a config variable to
>> enable trusted interfaces. I added tun+ to this varable to allow vpn
>> connections access to the local network.
>>
>> Darrick
>> --
>> Darrick Hartman
>> DJH Solutions, LLC
>> http://www.djhsolutions.com
>> http://www.djhsolutions.com/wiki
>>
>> -------------------------------------------------------------------------
>> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
>> Don't miss this year's exciting event. There's still time to save $100.
>> Use priority code J8TL2D2.
>>
>> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
>> _______________________________________________
>> Astlinux-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>
>> Donations to support AstLinux are graciously accepted via PayPal to
>> [EMAIL PROTECTED]
>>
>
>
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Astlinux-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to [EMAIL
PROTECTED]
