火曜日, 3月 22, 2016

Spurs succumb to Linsanity 2.0 - San Antonio Express-News

Spurs succumb to Linsanity 2.0

March 21, 2016 Updated: March 21, 2016 11:07pm
CHARLOTTE, N.C. — Almost all of the Spurs’ 23-point lead had evaporated Monday night at Time Warner Cable Arena.
They eased into the fourth quarter leading Charlotte by five, hoping nothing too crazy happened in the final 12 minutes.
What happened next, in what became a 91-88 victory for the Hornets, was insanity.
Or, to dust off a word that feels from a bygone NBA era, “Linsanity.”
Jeremy Lin, a backup guard and once-upon-a-time folk hero, scored 15 of his 29 points in the fourth quarter to help the Hornets complete the season’s most improbable rally.
“He was spectacular,” Spurs coach Gregg Popovich said. “We couldn’t stop him all night.”
Postgame Wrap: Spurs blow 23-point lead, fall to Hornets, 91-88
San Antonio Express-News
By himself, Lin came within a point of equaling the Spurs’ scoring in the fourth quarter.
He buried all four of the 3-pointers he tried in the frame, including a deep one from the top of the arc that put Charlotte up 85-82 with 4:57 left.
“He made some unbelievable shots and got his confidence going,” said forward Tim Duncan, who returned to the Spurs’ starting lineup and posted a double-double. “It changed the game for them.”
Lin’s late outburst finished off the biggest comeback victory in Hornets history during regulation. Last season, they beat Milwaukee in OT after trailing by 24.
The Spurs, meanwhile, ended a string of 72 straight wins when leading by at least 15 points.
“They did a good job of hanging in and playing hard,” Popovich said after Charlotte’s 12th comeback victory from a double-digit deficit.
Truth be told, the Spurs feel like they fumbled away the game long before Linsanity came back en vogue.
Coming into the night, the coaching staff worried about an emotional letdown after Saturday’s thrilling home victory over Golden State.
Those fears seemed misplaced early, as the Spurs (59-11) held Charlotte to 3-for-21 shooting and forced five first-quarter turnovers to take a 28-7 lead.
When David West made a layup on the Spurs’ first possession of the second quarter to push the Spurs’ edge to 23, Charlotte coach Steve Clifford called a timeout 11 seconds in.
“When you play an elite team,” Clifford said, “it starts with competing against them.”
The Spurs mustered four points in the first 5:29 of the second quarter, going 2 for 7 with four turnovers during that stretch.
The Hornets (40-30) were able to slice the deficit to 51-36 at half, still kicking after a brutal start.
“In the second quarter, I thought our second team was basically out to lunch,” Popovich said.
LaMarcus Aldridge had 18 points and 12 rebounds. Duncan notched 16 points, 10 rebounds and four blocks, and Tony Parker went for 19 points and seven assists.
The Spurs’ bench, typically a strong suit, combined for 18 points on 7-of-22 shooting.
Boris Diaw, so crucial to the Spurs’ toppling of the Warriors two nights earlier, was 0 for 5 in his return to Charlotte.
“You would think it was lack of energy, but it wasn’t,” said Patty Mills, who was 1 for 5. “We came out in the beginning and we moved the ball well, we played good defense and got stops. There was that one little patch where we turned it over a few times, and they just punished us for it. We ended up on our heels.”
Even so, the Hornets — having trailed for all of the first three quarters — entered the fourth needing a hero to lift them over the top.
That’s when Lin reached back in time for the alter ego that has been mothballed since he left New York.
Lin became a national sensation during February of 2012, when he averaged 24.6 points over a 10-game stretch for the Knicks.
Linsanity turned out to have the staying power of disco, however. He has played for three teams in four seasons since leaving the Big Apple.
Monday night, with the game on the line, the Spurs had no answer for Linsanity 2.0. It was Lin’s first game with more than 16 points since Feb. 3.
“When I’m comfortable and in the zone,” Lin said, “it’s usually good for me.”
After a Lin jumper put Charlotte up by one with 48.4 seconds to go, the Spurs had two chances to pull ahead but Kawhi Leonard missed a jumper and a 3-point try.
Down three heading into the final 18 seconds, Mills and Danny Green — who combined to go 1 for 12 — each missed tying treys.
“We got lucky,” Lin said. “To beat San Antonio, normally you need sustained play for all 48 minutes. We definitely stole this one.”
Duncan did not disagree.
“Jeremy played a heck of a game and kind of took over for them,” Duncan said. “All in all they played well, but we gave the game away there for a couple of quarters.”
jmcdonald@express-news.net
Twitter: @JMcDonald_SAENSpurs succumb to Linsanity 2.0 - San Antonio Express-News

木曜日, 3月 17, 2016

死亡12公里 「蘇花改」改不改?

  
生活

死亡12公里 「蘇花改」改不改?

  • 蘇花公路東澳、南澳間12公里常發生死亡車禍,地方要求納入「蘇花改」。

  • 死亡車禍多緣自人禍,公路總局改善彎道,警方加強取締防範悲劇再發生。
蘇花公路東澳、南澳間12公里山路彎道多,警方統計,蘇花公路宜蘭境內近3年發生9起死亡車禍,包括本月初遊覽車、拖板車對撞,造成2死28傷車禍在內,有6件發生在「死亡12公里」、7人送命,地方疾呼政府應給居民一條安全回家的路。
蘇花公路東澳至南澳路段常見超速、超載及超車逆向違規,危機四伏。記者許正宏/攝影

蘇花太危險 全家人出門不敢同車

「開快撞人、開慢被撞,很害怕」,原住民青年漢聲說,蘇花東澳和南澳路段不是落石,就是車禍;想加速通過,遠離險境,但不時有重車出現,想快又不敢快;每次走蘇花公路,都感覺命捏在老天爺手裡。



南澳葉姓男子熟悉蘇花公路路況,因道路才9公尺寬、彎道又多,開車在路上,冷不防就有大車為超車逆向迎面而來,心驚膽戰。他說,全家人出門北上時,他會獨自開車走蘇花公路,但妻小搭火車,再到羅東火車站會合,「雞蛋不能全放在一個籃子裡」,以防萬一。

記者直擊 過彎道腎上腺素飆升

蘇花公路有多危險?記者開車從蘇澳沿蘇花公路以速限40公里南下,沿路不斷與遊覽車、砂石車交會;砂石車多超速,會車時車身會輕微搖晃,記者緊握方向盤,提醒自己「要小心」。



「前方彎道不知會冒出什麼車」,走一段路就會出現彎道,安全過了幾個彎,再一次過彎時,一輛白色轎車冷不防高速跨越雙黃線「迎面而來」,讓記者腎上腺素瞬間飆高。



除車禍威脅,頻頻出現眼前的「小心落石」標誌也讓人心驚。記者看見殘破山壁布滿防護網,彷彿隨時會有石塊砸落,也許這也是這麼多人冒險超車的原因—誰也不想在落石路段多停一秒鐘。
蘇花公路彎道多,大車不時跨車道超車。記者許正宏/攝影

「蘇花改」改不改 正反意見對立

南澳鄉民代表會主席李元亮批評,蘇花改跳過這一段,是工程一大敗筆;居民則希望加闢隧道,讓大車走原路,小車走隧道,大小車分流才安全,並要警方加強取締違規。



東澳、南澳路段是否納入「蘇花改」範圍,引發各方不同意見。交通部蘇花公路改善工程處則證實,近期將啟動「東澳─南澳段」改善工程評估,最快今年中委託顧問公司啟動可行性評估,初步規畫在東澳到南澳段新建隧道,若評估可行,預計明年送環評審查。
蘇花公路事故不斷,蘇花改工程讓花東人出現一絲安全返家的曙光,但工程範圍跳過事故率最高的南澳與東澳段,讓民眾不滿。記者許正宏/攝影
新內閣交通部長熱門人選賀陳旦昨天則直言,交通部現在要啟動東澳─南澳段可行性評估,表面上是蘇花改分階段建設,實際上卻代表當年規畫不完整,如今無論從整體規畫、交通管理,都應重新認真檢討,而非因某部分人的聲音就分段建設。



公路總局南澳工務段表示,已斥資6千多萬元改善6處「急彎」路況,預計明年10月完工。蘇澳鎮長陳金麟建議趁機加寬路幅,以利警方設設測速桿。



宜蘭縣砂石公會理事長林建奮說,部分砂石司機行為難以約束,一旦被罰,司機要自己繳罰款,支持警方在易肇事或過彎路段加裝測速器嚴格取締。

聯合報/林縉明、吳佩旻、羅建旺、戴永華、侯俐安 報導
聯合報/邱瑞杰、柯永輝、翁海玲、劉宜峰 製作
主圖/許正宏 攝影
影音/許正宏、羅建旺、吳佩旻

死亡12公里 「蘇花改」改不改?

Host Your Own Virtual Private Network (VPN) with OpenVPN - All

Host Your Own Virtual Private Network (VPN) with OpenVPN - All

Host Your Own Virtual Private Network (VPN) with OpenVPN

 by 

Picture of Host Your Own Virtual Private Network (VPN) with OpenVPN
A Virtual Private Network, or VPN, creates an encrypted tunnel between you computer (client) and the VPN (server). This encrypted tunnel carries data that cannot be deciphered without the proper keys, and you control what clients have access to those keys. A popular VPN software is called OpenVPN. This software uses strong encryption methods to help ensure that no spying eyes can see what you are doing. I cannot guarantee that this software will keep you completely anonymous, but it is an excellent start. VPNs have many other uses besides Internet anonymity; they can connect a user to a local area network even if they are not anywhere near it. If you need to access a file at a business from your home, a VPN is probably used. The objective of this guide is to explain how to configure OpenVPN on a server and client to form a strong encrypted VPN tunnel.

This guide helped me configure my connection. If you run into any trouble in this tutorial, take a look at this guide or leave a comment below. 

Step 1: Prerequisites

These are the things you will need in order to successfully create a VPN.

An Ubuntu Linux Server. If you do not have a Linux Server, refer to my cloud guide for more information on how to set one up.

Port forwarding skills. If you do not know how to port forward on a router, check out Step 7 of my cloud guide for specific instructions.

A domain name attached to your server. If you do not have a domain name for your server, refer to Step 9 of the cloud guide for instructions. If you have not already noticed, my cloud guide is a great reference point for basic information regarding server setup. I walk though the entire server setup in that guide. Please do not hesitate to ask questions! It is very important that you follow this guide to the letter. One mis-configured setting can throw off the entire configuration.

Step 2: Install OpenVPN

Picture of Install OpenVPN
We need to install OpenVPN on the Ubuntu Server in order to configure it properly. Open a terminal by pressing Control + Alt + T. Once the terminal window is open type:

sudo apt-get install openvpn bridge-utils

This will install the openvpn client on our server.
Note Ubuntu will ask your password. Type in the password that you created when you installed Ubuntu on the system. Do not worry that no asterisks are showing up when you are typing your password, its supposed to work that way! 

Step 3: Configure Network Settings

Picture of Configure Network Settings
We need to create a bridge in our server to allow the VPN to work. Open a terminal and type:

sudo nano /etc/network/interfaces

This command will allow you to edit the interfaces file of the server. The file should have two lines in it. If your file has more lines in it, be sure to comment those out with a hashtag (#).  I have added my comments in the example file below. Please remember to change the fields according to your specific network requirements. Make sure that you do not copy the first two lines of this code if you already have them in your file. Copy and paste the following code into the file. Once you have finished, press Control + O and Enter to save changes, and then Control + X to exit.


# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
# The next two lines are the original lines of the file, leave them in here.

auto lo
iface lo inet loopback

#These next lines will create a the bridge for OpenVPN

auto br0
iface br0 inet static
address 192.168.2.50
#The IP Address above needs to be the IP address of your server.
#Be  sure that this IP address is the Internal IP Address of the
#Server, not the public IP. It should look similair to the IP
#Address above.
netmask 255.255.255.0
#The netmask will probably not need to be changed.
gateway 192.168.101.1
#The gateway column refers to the default gateaway of your router.
#This address will probably be the same as the address used to
#port forward.
bridge_ports eth0
#This command bridges your ethernet connection for OpenVPN

iface eth0 inet manual
up ifconfig $IFACE 0.0.0.0 up
up ip link set $IFACE promisc on
down ip link set $IFACE promisc off
down ifconfig $IFACE down
#I really don't know what these last set of lines do, but they
#still need to be here.

Step 4: More Configuration and Forwarding!

Picture of More Configuration and Forwarding!
We need to enable IPv4 forwarding so a client on the VPN can browse the Internet. In the terminal type:

sudo nano /etc/sysctl.conf

Uncomment the line that says net.ipv4.ip_forward=1. To uncomment a line, simply remove the hashtag (#) at the beginning of the line.

Next, we need to forward port 1194 to the IP address of our server. Please seeStep 7 of my cloud guide for more information on how to port forward.

Reboot your server and ensure that all networking components are working. To test this, try to ping the server's IP address from another client on the network. If you are using windows, open a command prompt and type:

ping <your server's IP address>

If you get a response, you are good to go!

Step 5: Create the Server Keys and Certificates

Picture of Create the Server Keys and Certificates
VPN_6.png
VPN_7.png
VPN_8.png
VPN_9.png
VPN_10.png
The certificates we will create in this step allow our server to authorize clients trying to access the VPN.

Housekeeping

First we need to make an Easy-rsa folder, Open a terminal on the server and type:

sudo mkdir /etc/openvpn/easy-rsa/

Next, we need the example certificate files from one directory to the directory we just created.  In the terminal, enter:

sudo cp -R /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/

Change the ownership of the files by using the chown command. In the terminal enter:

sudo chown -R $USER /etc/openvpn/easy-rsa/

Vars file

We need to make some changes to the vars file in order to properly generate our certificates. In the terminal type:

sudo nano /etc/openvpn/easy-rsa/vars

This command will open the vars file in the terminal, we need to edit a couple of fields. The first field we need to edit is the export KEY_CONFIG field. Look for that line in the file and replace it with:

export KEY_CONFIG=/etc/openvpn/easy-rsa/openssl-0.9.6.cnf

This is the configuration file used to create authorization certificates.

Next, change the following fields at the bottom of your file to you liking. There are two e-mail lines, but you only need to edit the first one. Make sure you have quotation marks around each of the values.

export KEY_COUNTRY
export KEY_PROVINCE
export KEY_CITY
export KEY_ORG
export KEY_EMAIL

Once you are finished editing the values, press Control + O and then enter to save the changes, and Control + X to exit back into terminal.
We are now ready to generate certificates for the server.

This next set of scripts is going to create the script for the server and one client. In terminal, use the cd command to move into the proper directory by entering:

cd /etc/openvpn/easy-rsa/

Open the source script:

source vars

Clean the directory:

./clean-all

Build the encryption of the certificates and build the actual certificates:

./build-dh
./pkitool --initca
./pkitool --server server

Move into the new keys directory:

cd keys

Generate another key:

openvpn --genkey --secret ta.key

Copy all the keys into the /etc/openvpn/ directory:

sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/

The server keys and certificates are now created. Next, we need to make the client keys and certificates.



Step 6: Create Client Certificates

Picture of Create Client Certificates
The client certificates allow a client device access to the VPN server. These certificates will be made on the server and transferred to the client PC. Open a terminal and enter:

cd /etc/openvpn/easy-rsa/

Then prepare the vars script:

source vars

Create the client certificates:

KEY_CN=client ./pkitool client

Replace the word client with whatever name you are assigning to the client device. In my example, I assign the name ubuntu to my client device. Be sure to change both instances of the word client to your specific client name.

Transfer the following files from the server to the client device. If Ubuntu does not let you copy the files. Try pressing Alt+f2 and entering gksudo +nautilus. Then you will be copying the files as root.

/etc/openvpn/ca.crt
/etc/openvpn/ta.key
/etc/openvpn/easy-rsa/keys/client.crt
/etc/openvpn/easy-rsa/keys/client.key

Please note that the first two files have different directories than the last two. Transfer the files to the client device using some form of physical storage. Do not transfer the files over the Internet in a non-secure fashion such as e-mailing them to yourself. Later in this Instructable, I will show you where to place those files on the client device. 

Step 7: Create Server VPN Scripts

Picture of Create Server VPN Scripts
VPN_13.png
VPN_14.png
VPN_15.png
VPN_16.png
The server needs some VPN Scripts bring up the VPN network, and to bring the VPN network back down. In a terminal on the server, create the 'up' script by entering:

sudo nano /etc/openvpn/up.sh

A blank document will open in the temrinal. Copy and paste this text into the document:

#!/bin/sh
BR=$1
DEV=$2
MTU=$3
/sbin/ifconfig $DEV mtu $MTU promisc up
/sbin/brctl addif $BR $DEV

Once finished press Control + O to save changes and Control + X to exit. Now we need to create the 'down' script. In the same terminal enter:

sudo nano /etc/openvpn/down.sh

A blank document will open in the temrinal. Copy and paste this text into the document:

#!/bin/sh
BR=$1
DEV=$2
/sbin/brctl delif $BR $DEV
/sbin/ifconfig $DEV down

Once finished press Control + O to save changes and Control + X to exit.

Finally we need to make the scripts executable.  In terminal, enter:

sudo chmod 755 /etc/openvpn/down.sh

and

sudo chmod 755 /etc/openvpn/up.sh

This completes the up and down scripts for OpenVPN

Step 8: Configure OpenVPN Settings

This is a very confusing part for most people, so this is a very important step. We are going to configure the proper settings for the VPN server. There are many different things we have to change in this configuration file. In the file, a semicolon at the beginning of a line means that the line is commented out, meaning it does not apply. To uncomment a line, simply remove the semicolon and the line will become active. I will demonstrate this with as many pictures as I can. Please look at those pictures for the proper configurations if you do not understand the text. I am just going to tell you what to do in the text, so the pictures are extremely important.

Copy the sample configuration files to our openVPN server directory. In a terminal enter:

sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz /etc/openvpn/
sudo gzip -d /etc/openvpn/server.conf.gz

Then, open the Configuration file. In a terminal enter:

sudo nano /etc/openvpn/server.conf

Make these changes in the file:

Comment out the dev tun line.
Uncomment the dev tap line and add a 0 to the end. It should now say 'dev tap0'

Comment out server 10.8.0.0 255.255.255.0

Uncomment the ;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100 line.
Change that line to something like: server-bridge 192.168.101.50 255.255.255.0 192.168.101.85
192.168.101.99
The first IP address is the local address of the server. The second set of numbers is the subnet mask, match it to your IP address. In most cases this value will not need to be changed, The third set of numbers is the beginning range IP address you would like to assign to devices that connect to your VPN. The fourth set of numbers is the ending range IP address you assign to client VPN devices. When a device connects to the VPN, it will be assigned a local IP address defined in the final two sets of numbers in this line. It is important that you do not assign IP addresses in this file that are already in use by other devices on the local network.

Uncomment the ;push "route 192.168.101.1 255.255.255.0" line.
Change the IP address to match that of your default gateway. In my example it is: 192.168.2.1.

Uncomment the ;push "redirect-gateway def1 bypass-dhcp" line.

Uncomment the ;push "dhcp-option DNS 208.67.222.222" and ;push "dhcp-option DNS 208.67.220.220" lines. If you would like to point the point the server to your own DNS servers, change the DNS server IP addresses. If not, you can leave this addresses alone as they are OpenVPN's DNS Servers.

Uncomment the ;tls-auth ta.key 0 # This file is secret line.

Uncomment the ;cipher AES-128-CBC line.

Uncomment the ;user nobody and ;group nogroup lines

Add these next three lines to the bottom of the file:

up "/etc/openvpn/up.sh br0"
down "/etc/openvpn/down.sh br0"
push "explicit-exit-notify 3"

Reboot your server to restart all networking equipment.
This completes the VPN server configuration, now we need to configure our client.

Step 9: Install and Configure OpenVPN on Ubuntu Linux

This step will explain how to install and configure the OpenVPN client on Ubuntu Linux. If you are using Windows, I have created a configuration guide in the next step. I would head over there now.

In a terminal on the client device enter:

sudo apt-get install network-manager-openvpn-gnome

Copy the certificates from Step 6 into the home directory.

Open the network manager by clicking System Settings > Network.

Press the + button at the bottom of the page and create a VPN Interface. Choose OpenVPN as the connection type and click Create.

Name your VPN in the Connection Name field.
Enter the server's domain name you registered earlier in the gateway field.
Open your client.crt file in the user certificate field.
Open the ca.crt file in the CA Certificate field.
Open the client.key file in the Private Key field.

Click Advanced

In the general tab:

Check the Use LZO Data Compression checkbox
Check the Use a TAP device checkbox

In the security tab:

From the drop-down list in the cipher field, select AES-128-CBC.

In the TLS Authentication tab:

Check the Use additional TLS authentication checkbox.
Open the ta.key file from your home directory
Set the key direction to 1

Click Ok to save the Advanced Settings.

In the general tab:

Uncheck the All users may connect to this network checkbox.

Click Save to save your VPN settings.
Turn the VPN connection on and you should be good to connect to your VPN.

 

Step 10: Install and Configure OpenVPN on Windows

Picture of Install and Configure OpenVPN on Windows
VPN_38.png
VPN_39.png
VPN_40.png
VPN_41.png
VPN_42.png
Now I will show the Windows users how to configure OpenVPN on the client PC. First, visit this link and download the OpenVPN client for your version of Windows.

Next, open My Computer and click on your C: drive. Navigate to Program Files> OpenVPN>sample-config. If you are using Windows Vista/7/8, open My Computer as administrator.

Copy the client file.
Go back one directory and click the config folder. Paste the client file in this directory. Also, paste the files you copied from the server earlier in this guide into this folder.

Open the client.ovpn file with notepad. Edit the following lines just like in the server.conf file.

Comment out the dev tun line
Uncomment the dev tap line and add a 0 to the end. The line should now say 'dev tap0'.

In the remote server line, enter the domain name of your server. Do not remove the remote word or the 1194. See the picture for clarification.

In the SSL/TLS section. Enter the names of your keys and certificates. In my example I enter:

ca.crt
client.crt
client.key
Please see my picture for further clarification on this step.

Uncomment the tls-auth ta.key 1 line.

Uncomment the cipher line and replace the x with AES-128-CBC. The line should now look like 'cipher AES-128-CBC'

Save the client file.

There should be a OpenVPN GUI icon on your desktop. Open this program. If you are using Windows Vista/7/8 open this program as administrator. The program will load the configuration file. To connect to your VPN, find the icon in the system tray. Right click it and click connect. The program should now connect you to your VPN server.


Post a comment
Be nice! 
We have a be nice comment policy.
Please be positive and constructive.
  
metalinspired4 months ago
Great tutorial.
Do you have any update on how to tunnel IPv6?
HaroldK29 months ago
Great job on the site. In the event that you need to wind up unknown online then you have to look at this http://www.anonymousvpnsoftware.com
nickhuia year ago
I have gone through all of the instructions exactly as described, but ran in to a couple of problems. What do I need to do to fix these problems?
1) After I update the /etc/network/interfaces file, the server is no longer able to connect to the router and/or Internet.
2) Error messages appear when generating client keys.
3) There's no instructions regarding what to do with the Client Certificate Files and where to place them (Windows)
----- Original: /etc/network/interfaces -----
Able to pin the router connect to the Internet (to install things); Other devices can access server by going to ServerIP:Port via web browser.
----- BEGINING OF FILE -----
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto p1p1
iface p1p1 inet dhcp
----- END OF FILE -----
----- Followed Instructions: /etc/network/interfaces -----
Unable to ping the router and/or Internet; Other devices cannot connect either.
----- BEGINING OF FILE -----
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
# The next two lines are the original lines of the file, leave them in here.
auto lo
iface lo inet loopback
#These next lines will create a the bridge for OpenVPN
auto br0
iface br0 inet static
address 192.168.88.90
#The IP Address above needs to be the IP address of your server.
#Be sure that this IP address is the Internal IP Address of the
#Server, not the public IP. It should look similair to the IP
#Address above.
netmask 255.255.255.0
#The netmask will probably not need to be changed.
gateway 192.168.88.1
#The gateway column refers to the default gateaway of your router.
#This address will probably be the same as the address used to
#port forward.
bridge_ports eth0
#This command bridges your ethernet connection for OpenVPN
iface eth0 inet manual
up ifconfig $IFACE 0.0.0.0 up
up ip link set $IFACE promisc on
down ip link set $IFACE promisc off
down ifconfig $IFACE down
#I really don't know what these last set of lines do, but they
#still need to be here.
----- END OF FILE -----
Reference:
Picture of Client_Key_Error.jpg
GraydonT  nickhui11 months ago
i know in some cases isp will block certain things on a network to keep everyone else bandwidth as fast as possible. comcast does this the most espsesialy on port 80(http)
hakn8ta year ago
Novice. Your Cloud 2.0 was easy to follow. I am running into the same issue when I come to Housekeeping as below and nothing posted here or by searching internet has resolved it.
I am getting the could not resolve messages for us.archive.ubuntu.com. Easy-rsa does not install so I cannot move the certificates. What am I doing wrong?
Your assistance is greatly appreciated.
MFK DGAFa year ago
What I noticed is that after installing OpenVPN on Ubuntu Server 14.04 that when you run the command "sudo mkdir /etc/openvpn/easy-rsa/" it comes back as the directory doesn't exist. Then if you run "sudo mkdir /etc/openvpn/" it creates the directory which therefore means OpenVPN wasn't really installed. So when you try to run the command "sudo cp -R /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/" it can't execute because the directory was never create by the install.
I get this error if I let the OS install OpenVPN when I install the OS or when i manually install OpenVPN by executing the command "sudo apt-get install openvpn bridge-utils".
Maybe it has something to do with the fact that we are trying to do this on the actually Ubuntu Server OS (14.10) and not on the Ubuntu Desktop OS like in the screen shots?
The "mkdir" command is missing the "-p" flag to allow creation of intermediary directories as needed. Example:
$ mkdir one/two/three
mkdir: one/two: No such file or directory
$ mkdir -p one/two/three
 ls one/two
three

So, change the command to:
sudo mkdir -p /etc/openvpn/easy-rsa/
And it will work for you.
MFK DGAF  MFK DGAFa year ago
I took a closer look and when trying to execute "sudo apt-get install openvpn bridge-utils" it comes back saying it can't find 3 packages athttp://us.archive.ubuntu.com/....." but if you try to manually put the address in but leave out the "us" in front of archive.ubuntun.com it still comes back with not being able to find the files yet if you browse to it in your web browser it does exist, which this was one of the addresseshttp://archive.ubuntu.com/ubuntu/pool/main/o/openv...
So i'm not sure what is going on or how to fix it.
Maybe download the files, put them on a usb stick and install them locally? I would have to try and research the commands to do so.
salu203a year ago
i was able to successfully establish VPN connection following this tutorial and I am thankful for that as this is the best tutorial I have seen on net. But I am not able to do get internet connection on client machine as no website opens. I an using ubuntu 14.04 as client machine and my open vpn server is installed on ubuntu server 14.04 which is itself installed in virtualbox. I can post syslog for openvpn if u need but it does not show any errors or warnings . thx
VPN wasn't the main technology to make distant connections. More than a few years ago, the mainly wide-ranging way to attach computers among several offices was by using a leased line. Leased lines, for example integrated services digital network, 128 Kbps, are confidential system relations that a telecommunications corporation could lease to its clientele. Leased lines provide a corporation by way of a way to expand its confidential network more than its instant geographic region. These relations form an individual wide-area network (WAN) for the commerce. Though leased lines are dependable plus safe, the leases are luxurious, by costs increasing since the detachment amid offices increases.https://www.fipe.net/
wdmc852 years ago
When i type "sudo cp -R /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/" it says that the file is non existent. When i navigate to examples, there is no easy-rsa file there are "sample-config-files" "sample-keys" and "sample scripts" and they are folders. in none of the folders is there an "easy-rsa" file. Everything else in this was working perfectly for me i tried reinstalling openvpn and its the same. What could be going wrong?
jayredge (author)  wdmc852 years ago
It appears that OpenVPN has upgraded their packages for Linux. Easy-rsa now needs to be installed as a separate package. Because of this, the easy-rsa directory has changed, which is why the folder doesn't exist in the path you are trying. To install easy-rsa, type:
sudo apt-get install easy-rsa
Once that finishes installing, type:
sudo mkdir /etc/openvpn/easy-rsa/
Finally, copy the keys from the easy-rsa directory to the one you just created. The command is the same as the one you are trying, but the first path is different. Type:
sudo cp -R /usr/share/easy-rsa/* /etc/openvpn/easy-rsa/
Hopefully this fixes your issue. If you have any other problems please don't hesitate to leave another comment.
EliyahW  jayredgea year ago
When I do sudo mkdir /etcopenvpn/easy-rsa/ there is no such file or directory. I just downloaded on my linux computer can you give me instructions on how to install and start this application running?
amarkham1a year ago
With these additional lines added I lose all DNS host name lookups. IP of server... gateway... set corretcly.... reverting file to previous state clears up DNS.
amarkham1a year ago
Ditto... sudo cp -R /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/ returns "cp: cannot stat ‘/usr/share/doc/openvpn/examples/easy-rsa/2.0/*’: No such file or directory"
Internet security should be in the front of every ones mind. If you are travelling any where and using your laptop or mobile device then you need to use a VPN to protect your information and identity. I found a site comparing the best ones http://thebestproxyserver.com
DavidB112 years ago
Good job on the site. If you want to become anonymous online then you need to check this out. http://thebestproxyserver.com/private-internet-access-vpn-review/
fransmuniz2 years ago
Brother, very nice and complete tutorial, but it need to be crucially updated at least with 3 points:
1 - easy-rsa is not included by default, as you explain on answers
2 - Diffie Hellman now got 2048 bit key, so the archive is "dh2048.pem" and need to be changed on server.conf
3 - You need to change permissions on server side:
chmod 700 ta.key
chmod 700 client1.key
chmod 700 client1.crt
chmod 700 ca.crt
I got this answers on internet search and it took a long time to clarify!
Using ubuntu server 14.04.

Cheers fom Brazil.
bkronbergs2 years ago
Hello! I've been trying and trying this set up (I've followed and had some issues with your Cloud set up as well: but it's VPN that I really am interested in). I reached this step, configured and rebooted and the network interface stops working, I get the "the system network services are not compatible with this version" message afterwards. I've isolated that it's the first part of the lines input at this step. What can I do to stop this happening, or is it meant to? My server (physical, Ubuntu 12.04, cabled ethernet connection) loses internet connectivity as a result of this error, which I don't think will help when I want to connect to it for exactly that purpose later! Thanks for any help you can offer!
jayredge (author)  bkronbergs2 years ago
I can tell you for certain that you should not have that error when you add those lines to the file. Are you able to regain Internet connectivity after removing these lines from the file? After some googling about your error, I found this article. Please try to start the network-manager manually and see if that helps.
Hello there, thanks for your reply! Unfortunately, just tried to Start the Net.Man. manually, only to get the "Job is already running" message, and no change in the connectivity. I also tried adding the network manager to the rc.local file, which hasn't made any difference either.
The server isn't connected to the router in the background, as it's not showing up on my "Connected Devices" list. If I remove the lines of code from the interfaces file, connectivity is restored.
Any further help you can offer would be fantastic!
Could it be I'm getting my gateway address wrong? I'm a little hazy on what exactly that should be; I have a Sky router (UK), so should I be putting the address in to the Gateway field that I use to connect to manage that box?
jayredge (author)  bkronbergs2 years ago
Yes, I would check to see if the gateway IP address is correct. Make sure you are using the gateway address of your specific router/network. This address could be different from the one I use in my example configuration. The gateway IP address is generally the same address you use to connect to manage the router. If that still does not work, let me know and I will try to think of something else.