Comments on Internet & LAN Over VPN Using OpenVPN – Linux Server – Windows/Linux Clients – Works For Gaming & Through Firewalls

To ensure that IP forwarding will be enabled after the server is rebooted, you  should edit "/etc/sysctl.conf" and uncomment "net.ipv4.ip_forward=1".

Thanks a lot - added to the tutorial :)

If you want another easier quick method, try this

SSH to your Linux maching using the -D

 ssh -D 9000 user@servername

 Now, open your browser or whatever, setup yourself a SOCKS proxy at localhost port 9000 . bingo done.

Unsure if windows can do this, but should be able to with putty at a guess. 

Hi there
 
An SSH Tunnel is a flaky solution at best – next to no games allow users to setup a proxy for their online gaming natively. This means you have to use external software to force everything through the ssh tunnel (if you are reading this and want to know more, freecap is free and does this however I have had better results with Proxifier but this does cost $30 – there is a fully functional free trial for thirty days however). I have tried this on many games, and while it does work on some, most notably Source based games, it is not the complete solution that a VPN will provide.

Cheers

Greetings:

RE:  https://www.howtoforge.com/internet-and-lan-over-vpn-using-openvpn-linux-server-windows-linux-clients-works-for-gaming-and-through-firewalls

 It would be nice to know why iptables port forwarding and nat are needed; as well as how to handle if the Linux server in question is used as a production web, email, etc. server. 

Thank you.

This worked really well for me, thanks so much for sharing! Btw you can make the iptables rules persistent by running "service iptables save" after adding the nat rule.

Can't thank you enough, I'm so excited to have this working!

I had to add following in client1.conf.ovpn:

route-method exe
route-delay 2

Then everything worked perfect on Windows 7 (client).

If your Linux OpenVPN Server is in local network and connected to your router

through wireless adapter ( not with ethernet card ) you must add the word "local"

to the following line in server.conf file:

push "redirect-gateway def1"

Otherwise you cannot ping the server and disconnect after a while.

Resulting line should be as follows :

push "redirect-gateway local def1"

Great article, thanks alot !

edit /etc/vz/vz.conf on host and add iptable_nat and ipt_MASQUERADE to enabled iptables modules for openvz guests

I am Facing Same problem what you are explained 

You now need to press alt to display the menu at the top of the connections window

I am strucked here please let me know what is this point.

I am not getting clearly with this step remaining above all steps are fine

So I am facing a problem with openvpn-gui in windows systems. I am getting all LAN resoucres but not Public Resources.

So Please Help me Regarding this issue

Thanks and regargds

Ramu 

The best solutión for that is to use a box to NAT the ports to different machines inside your network. That way both share the same ip but have redirected their respective ports.

That way you don't "compromise" your production box with this vulnerability risk. I use a vlan aware switch (level 2) and a box running esxi (free) to "split" the hardware into virtual machines. Using this approach I have a VPC to play with.