在Ubuntu 10.04上使用OpenVPN连接到VPN

我试图通过Ubuntu 10.04上的OpenVPN连接到VPN。

我首先尝试了network-manager-openvpn软件包,但不幸的是,networkingpipe理器似乎有一些错误,阻止我连接开箱。 但是,我发现一篇文章解释了使用openvpn命令行的解决方法:

sudo /usr/sbin/openvpn --remote 123.456.678.901 --comp-lzo --nobind --dev tun --proto udp --port 1194 --auth-nocache --syslog nm-openvpn --script-security 2 --up /usr/lib/network-manager-openvpn/nm-openvpn-service-openvpn-helper --up-restart --persist-key --persist-tun --route-noexec --client --ca ca.crt --cert myuser.crt --key myuser.key 

我的日志似乎显示命令运行没有错误:

 Nov 28 23:27:22 localhost NetworkManager: <debug> [1291004842.002903] periodic_update(): Roamed from BSSID 01:28:31:A4:B5:A9 (Local Network) to (none) ((none)) Nov 28 23:27:28 localhost NetworkManager: <debug> [1291004848.002931] periodic_update(): Roamed from BSSID (none) ((none)) to 01:28:31:A4:B5:A9 (Local Network) Nov 28 23:27:33 localhost NetworkManager: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/tun0, iface: tun0) Nov 28 23:27:41 localhost nm-openvpn[18917]: OpenVPN 2.1.0 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 20 2010 Nov 28 23:27:41 localhost nm-openvpn[18917]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Nov 28 23:27:41 localhost nm-openvpn[18917]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Nov 28 23:27:48 localhost nm-openvpn[18917]: /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted> Nov 28 23:27:49 localhost nm-openvpn[18917]: LZO compression initialized Nov 28 23:27:49 localhost nm-openvpn[18917]: UDPv4 link local: [undef] Nov 28 23:27:49 localhost nm-openvpn[18917]: UDPv4 link remote: [AF_INET]123.456.678.901:1194 Nov 28 23:27:50 localhost nm-openvpn[18917]: [server] Peer Connection Initiated with [AF_INET]123.456.678.901:1194 Nov 28 23:27:52 localhost nm-openvpn[18917]: TUN/TAP device tun0 opened Nov 28 23:27:52 localhost NetworkManager: SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/tun0, iface: tun0) Nov 28 23:27:52 localhost NetworkManager: SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/tun0, iface: tun0): no ifupdown configuration found. Nov 28 23:27:52 localhost nm-openvpn[18917]: /sbin/ifconfig tun0 10.8.0.28 pointopoint 10.8.0.27 mtu 1500 Nov 28 23:27:52 localhost nm-openvpn[18917]: /usr/lib/network-manager-openvpn/nm-openvpn-service-openvpn-helper tun0 1500 1542 10.8.0.28 10.8.0.27 init Nov 28 23:27:52 localhost nm-openvpn[18917]: Initialization Sequence Completed 

但是,当我尝试在VPN(例如wiki.myvpn.com)中调出URL时,出现“找不到服务器”错误。

我的命令实际上是失败的,还是有一个额外的命令,我必须做的,使VPN特定的URL访问我?

编辑:这个问题似乎是networkingpipe理器不正确更新/etc/resolv.conf。 报告中有一些相关的 bug ,即使它们在几年前已经被确定,但问题显然仍然存在。 我发现,如果我在/etc/resolv.conf的TOP(不是底部或不能工作)中添加下面的行,那么openvpn实际上是可以工作的:

 domain mydomain.com search mydomain.com nameserver 10.123.10.128 

任何想法如何让networkingpipe理器正确地更新resolv.conf?

听起来像你可能不会解决“wiki.myvpn.com”到该主机的内部IP地址。 您是否尝试过使用主机的IP地址显示页面? 如果是这样,你需要让你的OpenVPN服务器使用server.conf选项传递DNS信息,如:

推“dhcp-option DNS 192.168.99.99”
推“dhcp-option DOMAIN myvpn.com”

如果内部networking上没有DNS服务器,则可以通过将内部主机添加到外部Ubuntu计算机上的/ etc / hosts来解决该问题。