DSM-G600, DNS-3xx and NSA-220 Hack Forum

Unfortunately no one can be told what fun_plug is - you have to see it for yourself.

You are not logged in.

Announcement

#1 2011-05-24 00:00:11

philleb
New member
From: Vienna
Registered: 2011-05-23
Posts: 3

OpenVPN Configuration Problems && AFPD-Help

First:
I "funpkged" the newest openvpn built on my dns323. I generated the keys via openssl and I am using this configurations-file:

Code:

local 10.0.0.11
port 1723
proto udp

#;dev tap
dev tun

tls-server
tls-auth ./ta.pem 0        # server

# root certificates
ca ./certs/vpn-ca.pem
dh ./certs/dh1024.pem

# server certificates
cert ./certs/servercert.pem
key ./certs/serverkey.pem       # server

server 10.10.0.0 255.255.255.0

push "route 10.0.0.0 255.255.255.0"
push "dhcp-option DNS 10.0.0.1"

# direct all traffic through VPN
;push "redirect-gateway"

;ifconfig-pool-persist ip.lst

# allow clients to be able to "see" each other.
client-to-client
# allow multiple clients to connect
duplicate-cn

keepalive 10 120

# extra security

;cipher BF-CBC           # Blowfish
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES

# enable compression on the VPN link.
comp-lzo

max-clients 10
persist-key
persist-tun

;verb 3
;status openvpn-status.log

If I check the configuration with

Code:

cd /ffp/etc/openvpn/ && openvpn --config /ffp/etc/openvpn/server.conf

The Log says:

Code:

root@Stuxnet:/mnt/HD_b2/ffp/etc/openvpn# cd /ffp/etc/openvpn/ && openvpn --config /ffp/etc/openvpn/server.conf 
Mon May 23 21:49:05 2011 OpenVPN 2.1.4 arm-unknown-linux-uclibc [SSL] [LZO2] [EPOLL] built on May 11 2011
Mon May 23 21:49:05 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon May 23 21:49:05 2011 WARNING: file './certs/serverkey.pem' is group or others accessible
Mon May 23 21:49:05 2011 Control Channel Authentication: using './ta.pem' as a OpenVPN static key file
Mon May 23 21:49:05 2011 Note: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)
Mon May 23 21:49:05 2011 Note: Attempting fallback to kernel 2.2 TUN/TAP interface
Mon May 23 21:49:05 2011 Cannot allocate TUN/TAP dev dynamically
Mon May 23 21:49:05 2011 Exiting

The NAS is connected to my Router/Modem with the IP-Adress 10.0.0.11. I want to connect from "outside" in tunnel to the NAS and surf secure in the internet if I am using it at public internet connections. Also I need more Ports because in my School there is only Port 8080 and 8443 and 443 open. Port-Forwarding is configured already.


Second Problem: I want to connect to the NAS via AppleTalk. I installed and configured it from this tutorial. The Avahi-Daemon is working super and clean but if I try to connect afp://10.0.0.11 the login-window prompt open and after entering them I get from the system the message that the version of the server I want to connect is not supported.
I would be pleased if you could help me.
Greets from Vienna.

Last edited by philleb (2011-07-02 18:27:39)


..:: D'Link323:Seagate:Barracuda:1TB+0.008TB:FW1.08:fun_plug0.5:transmission:avahi:sshd:netatalk:openvpn ::..

Offline

 

#2 2011-05-30 18:06:52

mastervol
Member
Registered: 2008-09-06
Posts: 81

Re: OpenVPN Configuration Problems && AFPD-Help

did you already try tap instead of the tun device?

you could try and give openvpn from optware a shot, that is at least the version i am using.
however my nas connects to the router (server) as a vpn client.


DNS-323     F/W: 1.06  H/W: ??  ffp: 0.5  Drives (normal mode): 1 x 1,5 TB Seagate SATA II ST31500341AS, 1 x 250 GB Western Digital SATA I

Offline

 

Board footer

Powered by PunBB
© Copyright 2002–2010 PunBB