Setup VPN in one of my jails, can't connect to internet.

[Joey S]

I followed this guide: https://forums.freenas.org/index.ph...g-up-transmission-with-openvpn-and-pia.24566/

Instead of performing the above steps in a transmission jail, I did it my sabnzbd jail.

Everything seemed to work. However after restarting the jail, it appears that sabnzbd can't connect to the internet.

I downloaded some nzbs on my PC and uploaded them to sabnzbd's web interface, but they're not downloading anything.

I remoted into the sabnzbd jail and ran ifconfig and this was the output:

Code:

[root@sabnzbd_1 /]# ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
    options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
    inet6 ::1 prefixlen 128
    inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
    inet 127.0.0.1 netmask 0xff000000
    nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair3b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
    options=8<VLAN_MTU>
    ether 02:22:8b:00:0b:0b
    inet 192.168.0.8 netmask 0xffffff00 broadcast 192.168.0.255
    nd6 options=9<PERFORMNUD,IFDISABLED>
    media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
    status: active
tun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    inet X.X.X.6 --> X.X.X.5 netmask 0xffffffff
    nd6 options=1<PERFORMNUD>
    Opened by PID 27082
[root@sabnzbd_1 /]# 

According to what I read, since the "tun1" interface shows up, at least some part of my configuration worked.

Can anyone explain why the jail might not be getting internet access and how I might fix that issue?
Also, assuming I can get it working, how can verify that the jail is using the VPN connection?

Thank you!

 

[Joey S]

I found a forum post over on PIA's website. One user suggested editing /etc/resolv.conf to 8.8.8.8 and 8.8.4.4 instead of my ISP's DNS. I tried it and it didn't fix the issue.

 

[Joey S]

Interesting. It seems to have started working now. I'm not quite sure though what the fix was. I found this in the sabnzbd logs:

Code:

2015-12-20 01:17:54,951::ERROR::[downloader:525] Probable account sharing (ssl.astraweb.com:443)
2015-12-20 01:17:54,952::INFO::[downloader:667] Thread 19@ssl.astraweb.com:443: server closed connection

So maybe my usenet provider blocked me because it thought I was sharing an account? Anyway, it is working now and I'm pretty confident that sabnzbd is going through the VPN because my speed is about half of what it was before configuring the VPN.

If there is a way, though, I would still like to confirm that the VPN is being used.

 

[pirateghost]

Why would you run your Usenet through a VPN when they offer HTTPS?

 

[Joey S]

Why would you run your Usenet through a VPN when they offer HTTPS?

Extra security? Cheap insurance? CISA? I guess you can never be too careful right. You think it's unnecessary?

 

[pirateghost]

Extra security? Cheap insurance? CISA? I guess you can never be too careful right. You think it's unnecessary?

I think it's unnecessary.

If they get past HTTPS that your Usenet provider offers, what makes you think your VPN is safe?

 

[Joey S]

I think it's unnecessary.

If they get past HTTPS that your Usenet provider offers, what makes you think your VPN is safe?

I guess I never thought about it like that. It just seems everyone recommends VPNs these days and it's so cheap I figured it was just some extra security.

 

[pirateghost]

I guess I never thought about it like that. It just seems everyone recommends VPNs these days and it's so cheap I figured it was just some extra security.

I can see value in a VPN for torrents, but not for newsgroups. Totally different technologies. ;)

 

[Joey S]

I can see value in a VPN for torrents, but not for newsgroups. Totally different technologies. ;)

thanks for the education!