Привет всем!!! Прошу помочь разобраться. По факту VPS-ка c белым ip (ens3), установлен openvpn + obfsproxy Я вообще пока с трудом вкуриваю тему маршрутизации. Что надо прописать в правилах чтоб заработало.Всяких примеров с правилами пробовал, ничего не работает.
obfsproxy --log-min-severity=info obfs3 --dest 127.0.0.1:1194 server ip_ens3:443client.opvn
client
dev tun
proto tcp
remote xx.xx.xx.xx 443
resolv-retry infinite
nobind
comp-lzo no
ca ca.crt
cert client.crt
key client.key
dh dh2048.pem
cipher AES-256-CBC
remote-cert-tls server
sndbuf 100000
rcvbuf 100000
tls-client
tls-auth ta.key 1
ns-cert-type server
keepalive 10 120
persist-key
persist-tun
verb 3
script-security 2
server.conf
port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0
cipher AES-256-CBC
tun-mtu 1500
;tun-mtu-extra 32
mssfix 1432
;txqueuelen 2048
;tcp-queue-limit 1024
;tcp-nodelay
server 10.48.9.0 255.255.255.0
daemon
;writepid /etc/openvpn/pid/openvpn.pid
ifconfig-pool-persist /etc/openvpn/tmp/ipp.txt
client-config-dir ccd
push "route 10.48.9.0 255.255.255.0"
keepalive 5 30
comp-lzo no
#user nobody
#group nobody
persist-key
persist-tun
status /etc/openvpn/log/openvpn-status.log
status /etc/openvpn/log/tcp-server-tcp.log
log /etc/openvpn/log/openvpn.log
verb 5
script-security 3
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
Это Log obfspoxy
[WARNING] Obfsproxy (version: 0.2.13) starting up.
[INFO] StaticDestinationServerFactory starting on 443
[INFO] Starting factory <obfsproxy.network.network.StaticDestinationServerFactory instance at 0x7f29c69ea950>
[INFO] Launched 'server' listener at '[scrubbed]:443' for transport 'obfs2'.
[INFO] Starting factory <obfsproxy.network.network.StaticDestinationClientFactory instance at 0x7f29c69f33b0>
[INFO] Stopping factory <obfsproxy.network.network.StaticDestinationClientFactory instance at 0x7f29c69f33b0>
[INFO] Starting factory <obfsproxy.network.network.StaticDestinationClientFactory instance at 0x7f29c69f3950>
Это лог клиента openvpn
Socket Buffers: R=[8192->100000] S=[8192->100000]
Attempting to establish TCP connection with [AF_INET]xx.xx.xx.xx:443 [nonblock]
MANAGEMENT: >STATE:1476350579,TCP_CONNECT,,,
TCP connection established with [AF_INET]xx.xx.xx.xx:443
TCPv4_CLIENT link local: [undef]
TCPv4_CLIENT link remote: [AF_INET]xx.xx.xx.xx:443
MANAGEMENT: >STATE:1476350580,WAIT,,,
WARNING: Bad encapsulated packet length from peer (12198), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Connection reset, restarting [0]
SIGUSR1[soft,connection-reset] received, process restarting
MANAGEMENT: >STATE:1476350580,RECONNECTING,connection-reset,,
Restart pause, 5 second(s)
Это Log openvpn.log на сервере
us=821607 MULTI: multi_create_instance called
us=821686 Re-using SSL/TLS context
us=821724 LZO compression initialized
us=821811 Control Channel MTU parms [ L:1560 D:1182 EF:68 EB:0 ET:0 EL:3 ]
us=821838 Data Channel MTU parms [ L:1560 D:1432 EF:60 EB:143 ET:0 EL:3 AF:3/1 ]
us=821879 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
us=821892 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
us=821912 Local Options hash (VER=V4): '9915e4a2'
us=821928 Expected Remote Options hash (VER=V4): '2f2c6498'
us=821957 TCP connection established with [AF_INET]127.0.0.1:60242
us=821971 TCPv4_SERVER link local: [undef]
us=821983 TCPv4_SERVER link remote: [AF_INET]127.0.0.1:60242
us=774609 127.0.0.1:60242 Connection reset, restarting [0]
us=774675 127.0.0.1:60242 SIGUSR1[soft,connection-reset] received, client-instance restarting
us=774741 TCP/UDP: Closing socket
