VPN runs on EasyOS 5 but traffic not going thro'

[bean]

As above the VPN works , but in short your outside (world facing ip is of your Broadband router) the browser Chrome is not using the VPN it is just running as it were...........

from terminal curl ifconfig.me gives as before your external ip ie not the VPN

any ideas,

Also TV Panel will not connect unless VPN off. In Fossapup TV works withh VPN.

Overall EasyOs works exceptionally well, also very fast, audio connections are a lot more direct/simpler, brilliant work Barry, but then Puppy has always been the best imo.

i am just a curious tinkerer,

[bean]

i installed a Conky.pet but not a squeak or sign of it. it sdhows installed in Package Manager but i cannot access it

[BarryK]

VPN is one of those things that I have never used, so don't know much about it.
Anyone else got it going with EasyOS?

[williwaw]

bean, did you try wireguard? Barry has it in the last few versions. I set it up a few years a go with a .deb package, so I know it works with Easy, but have not tried it lately.

[BarryK]

bean, did you try wireguard? Barry has it in the last few versions. I set it up a few years a go with a .deb package, so I know it works with Easy, but have not tried it lately.

Yes, wireguard is in the package manager.
EDIT: package 'wireguard-tools' is builtin in EasyOS 4.5.5 and 5.0, nothing to install.

Alfons tested it in Easy 3.1.10, Nov. 2021, his email to me:

Have now established a peer-to-peer connection with my smartphone from the internet to samba easyos-3.1.10 and this works perfectly via the secure connection from wireguard. This is already great!

And an earlier email from him:

Code: Select all

Have performed a new installation EasyOS 3.1.10 for this test!
Test device: DELL Latitude D630, 2x Intel(R) Core(TM)2 Duo CPU  T9300  @ 2.50GHz

Tested wireguard and it runs perfectly!! Wireguard is really very fast, runs very stable and opens new interesting possibilities for EasyOS!

I noticed after changing the routing table (dynamic change via sakura on the main desktop, add the wireguard dev -> ip route add default dev wg0), that when i start the container (www) then reports the browser "Address Not Found" and by the container console is the routing table empty, but if i start the container before i change the routing table, then it works perfect.
Do not know if I should do otherwise. I think that is one thing, but there is time for that, the main thing is that the wireguard worked fine. I have wireguard with EasyOS now in use.

Have a question: do you know why ip rule does not work in EasyOS?
# ip rul
RTNETLINK answers: Operation not supported
Dump terminated
script wg-quick does not work therefore, also requires resolvconf! This script is not absolutely necessary for wireguard, offers more comfort, but it works also without, with manual input.


My simple script for EasyOS 3.1.10
only these few lines are required and wireguard runs.
  ip link add wg0 type wireguard
  ip addr add 10.13.13.3/32 dev wg0
  wg set wg0 listen-port 51820 private-key ./private-key
  ip link set wg0 up
  wg set wg0 peer MqLMr5KE5EkAjkYn5W2KohbN05KJq9SCpSbghHCUAHs= allowed-ips 0.0.0.0/0 endpoint 84.203.124.121:51820
  ip route add default dev wg0

Show interface and peer
# wg show
interface: wg0
  public key: rLUU83KtjjGiYXyxoAha4wDf+RDaP2knQvWACYQaBx4=
  private key: (hidden)
  listening port: 51820

peer: MqLMr5KE5EkAjkYn5W2KohbN05KJq9SCpSbghHCUAHs=
  endpoint: 84.203.124.121:51820
  allowed ips: 0.0.0.0/0
  latest handshake: 18 seconds ago
  transfer: 482.11 MiB received, 19.45 MiB sent

Remarks concerning kernel options:
supports dynamic debugging would be good for wireguard
  current: # CONFIG_DYNAMIC_DEBUG is not set
I have read that for IPv6 CONFIG_IPV6_MULTIPLE_TABLES=y is required, do not know if this is true
  current: # CONFIG_IPV6_MULTIPLE_TABLES is not set

[bean]

Hello all

Re EasyOS the VPN works only on Wireguard, and the browser works with it but is not bound or going through the VPN it. The VPN does not work on OpenVPN it wont connect.

TV-Panel wont work with VPN on (neither Wireguard or OpenVPN

Re Fossapup Vpn works fine on OpenVPN and the browser and TV Panel and all traffic uses the VPN, (however Wireguard wont connect)

EasyOS is approx the same speed as Fossapup V fast & responsive overall great selection of apps, i see the JWM is latest version,

I cant get Conky to work just handy to see ip address on Desktop etc etc the whole audio setup i think its Pulse audio its simpler more direct it just works very easily you don't have to go thro all the hoops like Fossapup.

I hope this is not seen as moaning, its not both are very fine Linux Distro's i am getting more used to EasyOS its its hard to install to HD the file system i mean Fossapup you can have multiple .4fs save files on the
windows partitions.

I normally via rufus install Puppies on a USB/SD drive then boot to a save file 4gb thats fine for me.

[williwaw]

another post I recall about wireguard at this forum is
viewtopic.php?t=1004

its its hard to install to HD the file system i mean Fossapup you can have multiple .4fs save files

I recently posted viewtopic.php?t=8086 that may help with hd installs. It's mostly links to pertinent documentation at https://bkhome.org/news/tag_easy.html

choosing among various savefiles at boot time is a nice feature of puppy. I have done similar (when Easy was structured differently), by having different boot entries In refind for multiple working folders that utilized the same easy.sfs, vmlinz and initrd files, but not sure if there is an easy way to do that now without having multiple complete installs.

I believe you can choose which snapshot to boot into (in the next session), by ticking a box in Easy Version Control, but the menu choices for rollbacks offered at boot time in the initrd are limited.

[BarryK]

Alfons sent me an email explaining how he got openvpn working with the latest EasyOS:

Code: Select all

Preparation:
1. Installing the 5 packages from folder deb
2. cp Server1-TCP443.ovpn  /etc/openvpn/
3. ln -s /etc/openvpn/Server1-TCP443.ovpn  /etc/openvpn/vpnconfig
Start:
1. modprobe tun
2. openvpn --daemon --config /etc/openvpn/vpnconfig
   username: freevpn.me  -> https://freevpn.me/accounts/
   password: XXXXXXX
   Remarks: openvpn works with main desktop (container does not work)
Check:
1. ifconfig tun0
2. https://www.expressvpn.com/what-is-my-ip
Stop:
1. killall openvpn

He did it by installing some Debian DEBs.

OpenEmbedded has a recipe for compiling openvpn, so I have done that and it is now available for download.
You can click on the "pkg" desktop icon, then "Configure" then "Update" the database, then search for "openvpn".
Or, just grab it directly (416KB):

https://distro.ibiblio.org/easyos/amd64 ... -64.tar.xz

All dependencies are already in EasyOS 5.0.

Alfons's instructions will need to be modified, as the openvpn package has /etc/init.d/openvpn, which will run at startup, and does stuff like Start: steps 1 and 2 in Alfons's instructions.
I replaced the password with "XXXXXXX"

Regarding Alfons's Preparation: steps 1, 2 and 3, the package has /etc/openvpn/samples
I don't know where he got that "Server1-TCP443.ovpn" from, it isn't in the DEB.

I have added openvpn to the package-list, so it will be builtin for the next release of EasyOS.

[BarryK]

Alfons has sent me another email:

Barry,
many thanks!!!
"I don't know where he got that "Server1-TCP443.ovpn" from, it isn't in the DEB"
I needed it for the test with freevpn.me and it comes from here: Download OpenVPN Certificate Bundle https://freevpn.me/accounts/

[bean]

Hi Barry big thanks to you and the others.

.....still cant get my VPN to work ie getting traffic to pass thro ( and no OpenVPN) however the browser extension VPN works fine, you obviously also need a paid account etc,
i dont know whether that uses wire guard or OpenVPN


EasyOS so far is brilliant, each day I try and discover and do more, the music side works 100% with no jiggling around "as it were" my next adventure ois to find out how the file system/structure works.

Windows is easy i grew up on NT 2000, and what ever came later, but really at home in a world of bebop a musical language rather like Linux in a funny way, not main stream and complicated to those who cant, etc
blah

enough yak, bed calling