GUIDE: Setting up Transmission with OpenVPN and PIA

[Rilo Ravestein]

Is this only in the script or both the ipfw rules

Of course you have to adjust all settings in the files to your specific needs.

My config file is Pia so I'm not sure what the address us

Your VPN service should provide you with the OpenVPN config file. A link is provide in the OP. I don't use PIA, so I don't know how else to get it if the link doesn't work.

When I open it it does not have a IP address it has

Show : OpenVPN config file

Client
Dev tun
Proto udp
Remote server address
Nobind
Persist-key
Persist-tun
Location for ca.crt
Tls-client
Remote-very
Auth-user-pass
Comp-lzo
Verb 1
Reneg-sec 0
Crl-verify location
Auth user location

Looks like you did not copy the correct config file provided by PIA to the correct place. OpenVPN needs to know what remote server IP to connect with.

Please also read the other thread i suggested in an earlier post. I suggested it for a good reason; it will give you some extra info on how things work, for OpenVPN as well as the firewall rules.

 

[denist]

Mm not sure no problems I'll see what hey have on there.


Sent from my iPhone using Tapatalk

 

[denist]

pia does not give the address range out so your way wont work for me...

need to sort out another..

there was another scrit that would bin transmission to the tun0 interface but need to know what transmission jail interface is one guys has it as epair something

is there a cmd to show me all the interfaces in the ssh putty.

Denis

 

[Rilo Ravestein]

You don't need the local address range. You need a server to connect with. That's the whole key thing. You connect to their server using an encrypted connection. Once connected to that server you get a "local" address in probably the 10.xxx range, but that is not the one you are looking for right now. You need the server address. And that is why it is in the OpenVPN config file, to tell OpenVPN what server to make a secure connection to

 

[Rilo Ravestein]

I see the problem.... The PIA config files don't contain an IP address. https://www.privateinternetaccess.com/openvpn/openvpn.zip. Just ping the address that is in that file, after "remote". That's the server you will be connecting to.

 

[Rilo Ravestein]

Crappy Tapatalk is getting worse and worse. My comment was posted twice.

But here it is: this thread already has a lot of info on how to get the server address, by users who had the same problem that you are now facing. One of them is post #41. Check it out.

 

[denist]

the link is not showing.

 

[Rilo Ravestein]

Do you actually look at the links I provide? In every config file in the zip from post 115 is one.

 

[denist]

ok i got ip address 9 of them for pia now i dont have one it will choose one if the 9 that i have can this be incorporated in your scripts

Thanx

 

[Rilo Ravestein]

It's up to you to decide which server you want to connect to. Use that config file for OpenVPN and use the IP address in your script/rules.

 

[denist]

Can I use all 9 I have made some progress with adding all 9 into ipfw rules now just testing.


Sent from my iPhone using Tapatalk

 

[denist]

Then I can see if u can use the script you made.


Sent from my iPhone using Tapatalk

 

[denist]

I can use the script you made


Sent from my iPhone using Tapatalk

 

[Rilo Ravestein]

You are asking questions which are really basic (OpenVPN) functionality. Google is your friend here.
If you use some OpenVPN config file, you should create allow rule(s) in ipfw for the server listed in THAT file. You can allow as many IP addresses as you want, but that kinda defies the purpose of a firewall.

 

[jubjub]

Thanks to the OP of this thread for posting the guide, I am a noob when it comes to these things and managed to get things working!

I am also looking to port forward and saw the below post (didn't copy in the script)

I am interested in using the port forward feature of PIA. I hacked together this script starting from the PIA script, and it seems to work (forwards port to Transmission). I am still learning FreeNAS and scripting so if anyone has a more elegant solution I would be interested.

Now due to my noobness I have no idea how to run this script.. Can someone please point me in the right direction?

Cheers :)

 

[foonji]

Thanks for the excellent guide, however I've run into a roadblock.

I've gone through the process, openvpn is running, when i ifconfig i get tun0 with 10.x.x.x range ip's. However I can't seem to get anywhere.

trying "wget http://smart-ip.net/myip -O - -q ; echo" comes back with no results, and transmission can not connect to anything. Is there something i'm missing, further setup?

Get the following at the end of the script... note no new IP

Code:

Starting openvpn.
Waiting 10 seconds for OpenVPN to spin up
If these are different, OpenVPN is working
Old IP: 118.x.x.x
New IP:
root@transmission_1:/tmp # 

 

[foonji]

Log file from openvpn

Wed May 27 21:55:03 2015 OpenVPN 2.3.6 amd64-portbld-freebsd9.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on May 26 2015
Wed May 27 21:55:03 2015 library versions: OpenSSL 0.9.8za-freebsd 5 Jun 2014, LZO 2.09
Wed May 27 21:55:03 2015 WARNING: file '/usr/local/etc/openvpn/pass.txt' is group or others accessible
Wed May 27 21:55:03 2015 UDPv4 link local: [undef]
Wed May 27 21:55:03 2015 UDPv4 link remote: [AF_INET]81.x.x.x:1194
Wed May 27 21:55:03 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed May 27 21:55:07 2015 [Private Internet Access] Peer Connection Initiated with [AF_INET]81.x.x.x:1194
Wed May 27 21:55:10 2015 TUN/TAP device /dev/tun0 opened
Wed May 27 21:55:10 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed May 27 21:55:10 2015 /sbin/ifconfig tun0 10.x.x.x 10.x.x.x mtu 1500 netmask 255.255.255.255 up
add net 81.x.x.x: gateway 192.x.x.x
add net 0.0.0.0: gateway 10.x.x.x
add net 128.0.0.0: gateway 10.x.x.x
add net 10.x.x.x: gateway 10.x.x.x
Wed May 27 21:55:10 2015 Initialization Sequence Completed

 

[Supa]

This means it's running right?

I'm currently having tracker problems. Any torrent I add.. Even the one from "ipmagnet" say "tracker: could not connect to tracker"

 

[foonji]

Looks like we may have a similar issue Supa - I haven't had any luck solving it :(

 

[Supa]

Looks like we may have a similar issue Supa - I haven't had any luck solving it :(

I actually updated all my plugins, restarted them, rebooted freenas, and transmission started working again.