rsync, openvpn and noip2

[past]

Here are my 5 cents.
All packages compatibile with AppInit.

It would be great to integrate the packages in the CSI repository.

Sorry for my googletranslated english.

[_linux_]

great !!

[_linux_]

not working with c200 series

[dc11ab]

Correct, the mentioned binaries in this post is compiled for the A100/110/B110 platform.

[pbando]

Thanx, it works fine, now im able to reach my files and manage torrents from the office. If sombody needs, i can post my config.

[vakantieman]

Is it possible to give us a quick how-to about installing open-vpn?

[pbando]

(12-15-2009 10:28 AM)vakantieman Wrote:  Is it possible to give us a quick how-to about installing open-vpn?

OK, Im working on it.

[pbando]

Here is a quick tutorial for openvpn for popcorn (note that there are not so many popcorn specific stuff here so this tutorial may apply for other devices, PCs, routers).

Usecases:
1) Connect to popcorn (by FTP, Telnet, SSH, Torrent client) from a remote PC (e.g from work, from your friend) same way as at home
2) Route specific IP traffic from remote PC to the internet through your home network (useful when you are behind a HTTP proxy (e.g in the office) which does

not allow some specific traffic through the proxy but allows http tunneling (more info about this usecase: http://www.http-tunnel.com/).


Software:
The same software can be used as a client and server.
Main site: http://openvpn.net

1) Client:

Windows users:
- Download the OpenVPN GUI from this site: http://openvpn.se/download.html. Install it. Note that OpenVPN gui already contains a OpenVPN client (so not only

the GUI), but that is outdated (v2.09). For Vista and Windows7 clients you definitly need a newer version. If you dont need a gui skip this installation.
- Download latest openVPN for your client machine from http://openvpn.net/index.php/open-source/downloads.html and install it.This will overwrite the

previously installed openvpn part of OpenVPN GUI (e.g v2.11).
- Openvpn is now installed to program files/openvpn and the TUN driver

Linux users:
- user your faviourite package manager (yum, aptget etc) to install openvpn. I dont know whether there is linux , bu for linux I dont think that it is

useful.


2) Server:
Extract the rar file of the original post to /share/Apps directory (e.g to where the other CSI programs are installed). Maybe in the first phase it is better

to disable the openvpn (to avoide that it starts at startup) and start it manually. You can do this in the appinfo.json file.

Tutorials,FAQ,Documatation:
http://openvpn.net/index.php/open-source...ation.html
http://openvpn.net/index.php/open-source/faq.html
https://help.ubuntu.com/community/OpenVPN


General:
OpenVPN has two mode bridged VPN (using the TAP device) and Routed VPN (using the TUN device). Since Past compiled only the tun device for popcorn only the

Routed VPN will be described here. Read the tutorials to see what is the difference.

Key generation:

Follow this part of the tutorial: http://openvpn.net/index.php/open-source...o.html#pki
For windows as an infomrative reference:

Code:

init-config
notepad vars.bat
vars
clean-all
build-ca
build-key-server server
build-key client1  <--repreat this for as many client as many you want to use, try to give more descriptive name
build-dh
openvpn --genkey --secret ta.key   (this is decribed here: http://openvpn.net/index.php/open-source/documentation/howto.html#security)

Move the following flies to popcorn openvpn/config directory, dont leave the server.* files on your client:

Code:

ca.crt
ca.key
ta.key
server.crt
server.csr
server.key
dh1024.pem

Your client should have these files only in openvpn/config directory:

Code:

ca.crt
ca.key
ta.key
client1.crt
client1.csr
client1.key

Network addressing:
- so lets assume that your home network is 192.168.1.0/8 (e.g using 192.168.1.x addresses)
- you have a home router which allocates this addresses, and connected to external network. your router has an external IP address allocated by your ISP.
You can check your external IP address here: http://www.ip-adress.com/
- when you connect to your popcorn from internet openVPN will create a virual private network between the remote client and popcorn. This will have some

private address space (10.x.x.x). This is configurable see later.



Creating config files:
Server (e.g popcorn) side
- file should be stored in openvpn/config. Use "popcorn.conf" because this file name is used by the automatic deamon script (daemon.sh) made by Past.
popcorn.conf sample file:

Code:

mode server
tls-server
port 1194
proto udp
dev tun
server 10.8.0.0 255.255.255.0
ca /share/Apps/Openvpn/config/ca.crt
cert /share/Apps/Openvpn/config/server.crt
key /share/Apps/Openvpn/config/server.key
dh /share/Apps/Openvpn/config/dh1024.pem
local 192.168.1.200 #<--your popcorn IP address,  not sure that this is really needed
tls-auth ta.key 0
push "route 192.168.1.0 255.255.255.0" # this ensures that the 192.168.1.x traffic from the client will be routed through the channel
keepalive 10 120
#;client-to-client  
persist-key
persist-tun
cipher BF-CBC
#status /var/log/openvpn/openvpn-status.log
verb 3
mute 20

-client side:
create a client.conf (linux) or client.opvn (on windows) file.
Sample client config:

Code:

client
remote 80.x.x.x   <-place your external ip address here
port 1194
proto udp
ca C:\\Progra~1\\OpenVPN\\config\\ca.crt
cert C:\\Progra~1\\OpenVPN\\config\\client1.crt   #<--change file name and path name according to your file names
key C:\\Progra~1\\OpenVPN\\config\\client1.key
dev tun
verb 3
mute 10
ns-cert-type server
persist-key
persist-tun
tls-auth ta.key 1
cipher BF-CBC
route-method exe
route-delay 2

Home (WLAN) router config:
- add port forwarding: forward the 1194 port to the popcorns IP address+1194 port.

you can start the openvpn server and load the tun module:
/sbin/insmod /share/Apps/Openvpn/mod/tun.ko
cd /share/Apps/Openvpn/config
../bin/openvpn --config popcorn.conf

Start the client side as well from gui or from command line (same syntax as in popcorn, but you should execute it from the config directory).

you have to see successfull connection setup, and telnet your_popcorn_ipaddress shoud work. This should work from your home network as well.

Second usecase (see above) needs some extra config I will describe it later.

[vakantieman]

Thank you, I will give it a try tomorrow. I will let you know.

[kopasz19]

HOWTO httptunnel install A-110?

[bjdo]

Thank you for building rsync for pch !!

I put it in /share/bin and added a softlink in /usr/bin in start_app.sh.

I use it to backup photos to pch disk.

[kopasz19]

please help httptunnel install

[hakank22]

I have a third use case. I would like my popcorn to access a server on the internet through openvpn. Does any of the instructions above apply to that case?

Thanks!

/Håkan

[pbando]

(05-13-2010 06:10 AM)hakank22 Wrote:  I have a third use case. I would like my popcorn to access a server on the internet through openvpn. Does any of the instructions above apply to that case?

Check the description above, the client side was also described there. Note that the same openvpn application can be used as a client as well, it comes from the config file.

[hakank22]

Oh yes! Sorry i forgot to update the thread. It's working after following the instructions. (Pity I'm in need of a "clean" pptp client instead of the vpn solution but that's another story)

/Håkan