<?xml version='1.0' encoding='utf-8' ?>
<rss version='2.0'>
<channel>
	<title>neilpahl.com Logs Feed: OpenVPN on Ubuntu Server Behind Firewall</title>
	<link></link>
	<description></description>
	<pubDate>Thu, 22 Jul 21 07:38:51 -0400</pubDate>
	<ttl>60</ttl>
	<item>
		<title>OpenVPN on Ubuntu Server Behind Firewall:: Entry 3: Access Remote Intranet (Web Resources or GUIs) via SSH Tunnel</title>
		<description><![CDATA[Alot of the time I need to join via VPN just so that I can reach the web resources which are only offered on the remote LAN. In this case, seting up a complete VPN infrastructure can be overkill and more efffort than I would like.So, instead I create an ssh tunnel and route my web traffic to the remote LAN. With just a simple ssh tunnel, and a little configuration to Firefox, I no longer have to add to the complexity of my server on that network. I believe that a simpler setup can reduce vulnerabilities down the line as there is less software you need to keep applying security patches for.First I need to bind a port to the ssh tunnel. I'm going to use port 1080 since its the one used for the SOCKS proxy in firefox that allows us to use the remote dns. Other uses may require a different port to be bound.In Linux, just add the -D option to your regular ssh command:ssh -D 1080 username@remoteiporaddress.com -p 22the -D is to bind port 1080. the -]]></description>
		<pubDate>Tue, 24 Jul 12 01:36:38 -0400</pubDate>
		<link>http://archived.neilpahl.com/logs/remote-administration/openvpn-on-ubuntu-server-behind-firewall/3-access-remote-intranet-web-resources-or-guis-via-ssh-tunnel/</link>
	</item>
	<item>
		<title>OpenVPN on Ubuntu Server Behind Firewall:: Entry 2: Where Is My Server If Its Behind A Firewall?</title>
		<description><![CDATA[If you are behind someone else's firewall, chances are you have a dynamic ip as well.Usually to keep track of the external IP of a host with dynamic ip, I use a ddns service which is supported with my router. If my router doesn't support ddns, I use a simple script which will email me the external IP address of the host.Behind a Firewall however, I have setup a reverse shh tunnel which can hold a persistent connection to an agent server. Then I can access the server which is behind the firewall by ssh'ing into the agent server at a specific port which will redirect me to the host behind the firewall. I will write a post on this when I get some time~Similarly, there is a way to maintain an openVPN connection between two hosts. I will write about this in the coming future too.Sorry for the short Log, but I just wanted to add a quick update to this topic.]]></description>
		<pubDate>Thu, 03 May 12 11:28:44 -0400</pubDate>
		<link>http://archived.neilpahl.com/logs/remote-administration/openvpn-on-ubuntu-server-behind-firewall/2-where-is-my-server-if-its-behind-a-firewall/</link>
	</item>
	<item>
		<title>OpenVPN on Ubuntu Server Behind Firewall:: Entry 1: First Things First: Bridging or Routing?</title>
		<description><![CDATA[When you are using an internal server to manage your intranet and LAN resources, some of the services running on on your internal server will run web-based gui's. Sure you can access those if you open up your intranet to the world wide web but that would defeat the whole purpose of your intranet. I host company resources over our intraweb, so it would be a bad thing to open them up to the world.Right now I setup FOG to ghost and manage PC images in a small LAN. It works great when I access the web-interface while connected to our local network, but I wouldn't be able to access this remotely.So, I'm seting up a VPN so that I can remotely connect to the intranet resources and web-gui's. I am planing on using OpenVPN.My internal server runs Ubuntu 10.04 Server LTS and sits behind a router (firewalled router). So before setting up the VPN, I have to choose between a Routed or Bridged network.My understanding of those two concepts are as follows:&gt;&gt; Adding the Bridging configurations to my Ubuntu Server,]]></description>
		<pubDate>Sun, 01 Jan 12 22:24:10 -0500</pubDate>
		<link>http://archived.neilpahl.com/logs/remote-administration/openvpn-on-ubuntu-server-behind-firewall/1/</link>
	</item>
</channel>
</rss>