(old)Puppy Linux Discussion Forum

Posted: **Mon 22 Dec 2014, 15:04**

http://www.vpnbook.com/howto/setup-openvpn-on-ubuntu

There is an easy way, for those who have privacy concerns, or to thwart criminal activities on wifi hotspots, to make a connection to the Web through a VPN : it is OpenVPN combined with VPNBook.

Once OpenVPN is installed on your desktop, you open a terminal window in the folder containing the certificate bundle from VPNBook, and you enter the command line : openvpn --config vpnbook-euro1-tcp443.ovpn.
That's all you need to have a free VPN, and be reassured that all your data are well-protected, even if you use a wifi hotspot, such as in an hotel, airport, public library, etc.
If you use another certificate bundle, you have to enter the right one, instead of euro1. The command line is just an example of what to do.

For P2P downloading, you should use a euro bundle. US bundles are not suited for P2P downloading or uploading, for legal reason.

The terminal shows you the process until the sequence is all done. VPNBook is providing the username and password, which is changed from time to time.

I hope that OpenVPN combined with VPNBook will get you on a new level of privacy and security. A paid service is based on OpenVPN as well, but with a nice graphical interface.

For those who surf the Web with Firefox, there is an addon from ZenMate which gives you a secure connection to the web, as well.

After you have changed your IP thanks to OpenVPN and VPNBook, or thanks to ZenMate, you can check your new IP address with http://whatismyipaddress.com/

Some operating systems offer VPN, such as Robolinux or Kodachi in their live version. They are not Puppy OS, but it is good to know.

Finally, i think OpenVPN combined with VPNBook is the best alternative for Linux users. You can use a VPN connection on a variety of devices, all you need is a terminal window, a certificate bundle from VPNBook and a command line.

All paid services are based on Windows, with a limited offer to Linux users. TorGuard provides a deb. I tried it with Puppy Precise. It works.

A final word : VPNBook suggests a one-time donation of 5$.

Posted: **Tue 07 Apr 2015, 12:35**

If you don't have Open Terminal Here, you can use basic commands to create a folder in Home, and go to that directory, where you have extracted VPNBook certificates.

Here's how :

First you must be a root user : use su, with your password, if not a de facto root user.

Then you tell terminal : mkdir
At this point you can call your directory any name but i would use vpnbook_start : 'mkdir vpnbook_start'

Then you tell terminal : cd vpnbook_start

You will be directed to that folder in Home directory.

Then you apply the command line : openvpn --config vpnbook-euro1-tcp443.ovpn
euo1 or any other bundle offered by VPNBook.

The terminal will prompt you to enter username : vpnbook, and password, which changes on a regular basis.

With mkdir and cd commands, you can use your terminal in any Linux OS to have VPNBook securely encrypting your traffic.

Once created in Home, folder vpnbook_start is available immediately with the command 'cd vpnbook_start'

The traffic is slower with VPNBook, and it shows when downloading stuff, but when you need to have privacy to input usernames and passwords, where traffic is not encrypted, it is the tool to use.

You can pay for VPN and have a faster traffic, but usually it is only for Ubuntu. VPN Unlimitedis a commercially available fast VPN, but only for Ubuntu. It should work with Ubuntu-based Puppy.

VPNBook is free, but donations are accepted.

Posted: **Sat 13 Jun 2015, 13:40**

Hi labbe5, on Precise 5.7.1 frugal installation downloaded "OpenVPN 2.2.1" and "libpkcs11-helper1 v. 1.09" from PPM, I use pupdial to connect to the Internet with my 3G modem.
When I type "openvpn --config vpnbook-euro1-tcp443.ovpn" in the terminal inside the "certificate bundle" folder this is what I see:

Sat Jun 13 12:32:44 2015 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Enter Auth Username:vpnbook
Enter Auth Password:
Sat Jun 13 12:33:03 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Jun 13 12:33:03 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Jun 13 12:33:03 2015 NOTE: --fast-io is disabled since we are not using UDP
Sat Jun 13 12:33:03 2015 LZO compression initialized
Sat Jun 13 12:33:03 2015 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Jun 13 12:33:03 2015 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sat Jun 13 12:33:03 2015 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Jun 13 12:33:03 2015 Local Options hash (VER=V4): 'bc07730e'
Sat Jun 13 12:33:03 2015 Expected Remote Options hash (VER=V4): 'b695cb4a'
Sat Jun 13 12:33:03 2015 Attempting to establish TCP connection with [AF_INET]176.126.237.217:443 [nonblock]
Sat Jun 13 12:33:06 2015 TCP connection established with [AF_INET]176.126.237.217:443
Sat Jun 13 12:33:06 2015 TCPv4_CLIENT link local: [undef]
Sat Jun 13 12:33:06 2015 TCPv4_CLIENT link remote: [AF_INET]176.126.237.217:443
Sat Jun 13 12:33:06 2015 TLS: Initial packet from [AF_INET]176.126.237.217:443, sid=22eefaa4 a4fd3233
Sat Jun 13 12:33:06 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Jun 13 12:33:10 2015 VERIFY OK: depth=1, /C=CH/ST=Zurich/L=Zurich/O=vpnbook.com/OU=IT/CN=vpnbook.com/name=vpnbook.com/emailAddress=admin@vpnbook.com
Sat Jun 13 12:33:10 2015 VERIFY OK: depth=0, /C=CH/ST=Zurich/L=Zurich/O=vpnbook.com/OU=IT/CN=vpnbook.com/name=vpnbook.com/emailAddress=admin@vpnbook.com
Sat Jun 13 12:33:12 2015 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Jun 13 12:33:12 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 13 12:33:12 2015 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Jun 13 12:33:12 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 13 12:33:12 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Jun 13 12:33:12 2015 [vpnbook.com] Peer Connection Initiated with [AF_INET]176.126.237.217:443
Sat Jun 13 12:33:15 2015 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1)
Sat Jun 13 12:33:15 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 89.233.43.71,dhcp-option DNS 91.239.100.100,route 10.9.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.9.3.142 10.9.3.141'
Sat Jun 13 12:33:15 2015 OPTIONS IMPORT: timers and/or timeouts modified
Sat Jun 13 12:33:15 2015 OPTIONS IMPORT: --ifconfig/up options modified
Sat Jun 13 12:33:15 2015 OPTIONS IMPORT: route options modified
Sat Jun 13 12:33:15 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Jun 13 12:33:15 2015 ROUTE: default_gateway=UNDEF
Sat Jun 13 12:33:15 2015 TUN/TAP device tun1 opened
Sat Jun 13 12:33:15 2015 TUN/TAP TX queue length set to 100
Sat Jun 13 12:33:15 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Jun 13 12:33:15 2015 /sbin/ifconfig tun1 10.9.3.142 pointopoint 10.9.3.141 mtu 1500
Sat Jun 13 12:33:17 2015 NOTE: unable to redirect default gateway -- Cannot read current default gateway from system
Sat Jun 13 12:33:17 2015 /sbin/route add -net 10.9.0.1 netmask 255.255.255.255 gw 10.9.3.141
Sat Jun 13 12:33:17 2015 Initialization Sequence Completed

Checked out the IP on "whatismyipaddress.com" site and it's the same as before.

I think the issue is that OpenVPN is "unable to redirect default gateway", used "route-gateway gw|'ppp0'" option in the "vpnbook-euro1-tcp443.ovpn" configuration file but the output tells me that it isn't a valid addresse. What can I do to make redirection on default gateway possible, if this is the problem. This is "ipinfo" output.

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4 errors:0 dropped:0 overruns:0 frame:0
TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:200 (200.0 B) TX bytes:200 (200.0 B)

ppp0 Link encap:Point-to-Point Protocol
inet addr:1.194.129.181 P-t-P:10.64.64.64 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1440 Metric:1
RX packets:4915 errors:0 dropped:0 overruns:0 frame:0
TX packets:5046 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:2673616 (2.5 MiB) TX bytes:554909 (541.9 KiB)

tun1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.9.3.226 P-t-P:10.9.3.225 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:6 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:240 (240.0 B) TX bytes:0 (0.0 B)

Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0
10.9.0.1 10.9.3.225 255.255.255.255 UGH 0 0 0 tun1
10.9.3.225 0.0.0.0 255.255.255.255 UH 0 0 0 tun1
10.64.64.64 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:2605 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN
tcp 0 0 1.194.129.181:59642 23.51.251.27:80 TIME_WAIT
tcp 0 0 1.194.129.181:60059 104.238.141.75:80 TIME_WAIT
tcp 0 0 1.194.129.181:59643 23.51.251.27:80 TIME_WAIT
tcp 0 0 1.194.129.181:55759 176.126.237.217:443 ESTABLISHED
tcp 1 1 1.194.129.181:60060 104.238.141.75:80 CLOSING
tcp 0 0 1.194.129.181:59641 23.51.251.27:80 TIME_WAIT

Hope helps. Thank's.

Posted: **Mon 15 Jun 2015, 19:00**

I have a limited technical knowledge, so i can't explain why you are having this kind of problem.

I see that the sequence is completed, so i assume the IP should be different from the one you use at the moment, at home or in a public library.

I use vpnbook on a variety of computers and my experience is good, the IP is changed. Whatismyipaddress website is confirming the fact by showing the area, such as Romania.

Unless there is a conflict with something else on your system, a web browser plugin, such as Zenmate, a proxy, etc.

On a Debian system, you have to start your command line with sudo, and be sure to have openvpn installed, and be in the folder where certificates are unzipped.

As i said, i have a limited technical knowledge about openvpn and vpnbook. Alternatively, you could use one of the very few VPN for Ubuntu and a Ubuntu Puppy. You could have a better luck, in exchange for a few dollars per month.

Posted: **Mon 15 Jun 2015, 20:14**

Thank you for the response, unfortunately both we haven't technical knowledge.

Anyway you have already proven to have a great knowledge in safety matter, I read many of your threads with interest.
I will try to navigate through a VPN with different means.
Thank you.

Posted: **Mon 29 Jun 2015, 21:04**

corvus

I had the same problem until I tried a different certificate:
vpnbook-euro1-tcp80.ovpn
Now, I am apparently in Bucharest.

Posted: **Tue 30 Jun 2015, 12:22**

Thanks for your response Keef but didn't work for me.
I also tried vpnbook-euro2-tcp80.ovpn and vpnbook-euro2-tcp443.ovpn but nothing to do my IP is always the same as before.

Regards

(old)Puppy Linux Discussion Forum

OpenVPN & VPNBook

OpenVPN & VPNBook

using commands with terminal

Not able to use OpenVPN

vpnbook

vpnbook

openVPN