Theo Fokkema schreef op 03-10-2017 12:33:
I'd have to hire a programmer to write a separate service that wraps
around the OpenVPN service, probably.
But I can hardly imagine that I'm the first person to want such a
setup. Are any such wrappers or scripts existing?
I noticed there are a number of public VPN providers who provide
internet privacy by setting up a VPN between client and an anonymous
internet connection. Many of these use OpenVPN.
How do they do autoselect?
AirVPN uses its own tool they call "Eddie" which will do latency tests
and connect to a recommended server, but which will also allow you to
manually choose one.
Someone suggested 'fake VPN' connections from within the office, with
the only drawback being users seeing VPN error messages.
I thought of another 'dirty' solution, but it will probably also
generate lots of errors on the road warriors' laptops:
Suppose I create a separate dns entry openvpn.companyname.com on the
public (internet) DNS and configure my clients to connect to that, and
then I could create the same entry in the LAN's (internal) DNS to point
to a nonexisting server, or a server declining the connection or not
handing out IP's.
But that is really dirty, right?
I don't see why it's necessary. But I guess it could work.
You can also let the 'fake' VPN server just not give out any routes to
the company network, which you can do with a client-config-script.
At that point the VPN is only used for the VPN, but if your VPN clients
normally only use the VPN to get to the normal company network (ie. you
don't stay on the VPN with your data) then connecting to the VPN (with
no default route) does no damage.
That means the "useless" VPN will barely get used, while in the office.
It won't give out routes to your company LAN.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
