u/No-Key-2546

Hi everyone,

I'm currently setting up a VPN server (hosted linux machine) in order to connect my notebook to my home network using OpenVPN Access Server. I managed to get it to the point where I can successfully ping my router at home using it's private address. The only remaining problem is accessing other machines in my home network. Both my router and my notebook are running in split-tunnel mode, server pushes the route for my home network. My home router has the ASUS wrt merlin firmware. Is there a routing problem, e.g. devices or router at home don't know where to send responses or is there another issue I don't have in mind?

Running tracert gives me this:

C:\Users\User>tracert 192.168.50.1 (<- Router at home)

Tracing route to 192.168.50.1 over a maximum of 30 hops

  1     *      193 ms   207 ms  172.27.230.1
  2    44 ms    43 ms    47 ms  192.168.50.1

Trace complete.

C:\Users\User>tracert 192.168.50.3 (<- Server at home)

Tracing route to 192.168.50.3 over a maximum of 30 hops

  1   667 ms   411 ms    62 ms  172.27.230.1
  2    71 ms    48 ms   139 ms  172.27.228.3  (<- Router at home)
  3     *        *        *     Request timed out.

And the ipconfig output for my notebook:

Unknown adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::2d38:8018:80e1:bdc3%18
   IPv4 Address. . . . . . . . . . . : 172.27.230.2
   Subnet Mask . . . . . . . . . . . : 255.255.254.0
   Default Gateway . . . . . . . . . : 

Notebook config:

client
proto udp
nobind
remote <placeholder>
port 1194
dev tun
dev-type tun
remote-cert-tls server
tls-version-min 1.2
reneg-sec 604800
tun-mtu 1420
auth-user-pass
verb 3
push-peer-info

Router config:

client
proto udp
nobind
remote <placeholder>
port 1194
dev tun
dev-type tun
remote-cert-tls server
tls-version-min 1.2
reneg-sec 604800
tun-mtu 1420
auth-user-pass
verb 3
push-peer-info

Hi everyone,

I login into my server via SSH and try to run a script as a regular user without sudo, for whatever reason it works fine as long as there is no read command in the script, but whenever there is read I immediately get a regular prompt and it only outputs the read string when I enter exit. Does anyone know what's the problem here?

https://preview.redd.it/grp160muf1ah1.png?width=536&format=png&auto=webp&s=0bf7e42a857f3d7bd1ad96e0cb383019a3cf7fc8

Hi, I want my notebook to connect to an OpenVPN Server and only send traffic for my home network through it. Full tunnel works without any issues but the split tunnel config break my regular internet traffic that's not being sent through the tunnel. What is wrong with my config? I am pretty new to vpn setups (I removed the keys part):

client
nobind
dev tun
remote-cert-tls server
remote vpn.mydomain.com 1194 udp
<key>

</key>

<cert>

</cert>

<ca>

</ca>

key-direction 1
<tls-auth>

</tls-auth>

route-nopull
route 192.168.50.0 255.255.255.0

Hey everyone,

I'm refining my home network setup and would like to get a sanity check on my routing architecture.

The Goal: I have an OpenVPN server (Docker) and an Asus router (Asuswrt-Merlin) connecting to it as a client. I need other VPN clients (like my laptop) to reach devices in my local home LAN (192.168.50.0/24) that sits behind that Asus router.

What is configured:

• Server-side Static Route: I’ve configured the server to treat the 192.168.50.0/24 subnet as reachable through the OpenVPN interface. This tells the server kernel to hand off any traffic destined for this subnet to the OpenVPN process.
• Client-specific Routing (CCD): I’m using client-config-dir (CCD) files on the server. For the Asus router’s certificate Common Name (CN), there is an iroute 192.168.50.0 255.255.255.0 directive. This tells the OpenVPN process specifically to route this subnet into the tunnel established by that specific client.
• Automation: To manage this, I have a script that maintains the openvpn.conf and the /etc/openvpn/ccd/ folder. It injects these configurations into the Docker container via docker cp whenever I add or modify networks.

Scripts:

• Add Client:

​

#!/bin/bash

# Ensure script is run as root
if [[ $EUID -ne 0 ]]; then
   echo "Please run as root (sudo)."
   exit 1
fi

# Set directories
CLIENT_DIR="/home/docker/ovpn_clients"
CONFIG_FILE="/home/docker/server_stack/openvpn/openvpn.conf"
mkdir -p "$CLIENT_DIR"

# Basic Inputs
read -p "Enter the name for the new VPN client: " CLIENT_NAME
if [ -z "$CLIENT_NAME" ]; then echo "Error: Client name cannot be empty."; exit 1; fi

echo "Enter the networks you want to route via VPN (space-separated, e.g., 192.168.1.0/24 10.0.0.0/24):"
read -p "Networks: " NETWORKS

echo "--- Generating client certificate ---"
docker exec -it openvpn easyrsa build-client-full "$CLIENT_NAME" nopass

echo "--- Updating Server Routing Configuration ---"
for NET in $NETWORKS; do
    IP=${NET%/*}
    MASK_BIT=${NET#*/}

    case $MASK_BIT in
        24) MASK="255.255.255.0" ;;
        16) MASK="255.255.0.0" ;;
        8)  MASK="255.0.0.0" ;;
        *)  echo "Warning: Only /24, /16, /8 supported. Defaulting to /24."; MASK="255.255.255.0" ;;
    esac

    ROUTE_CMD="push \"route $IP $MASK\""
    if ! grep -qF "$ROUTE_CMD" "$CONFIG_FILE"; then
        echo "$ROUTE_CMD" | sudo tee -a "$CONFIG_FILE"
    fi
done

# Export the configuration
docker exec -it openvpn ovpn_getclient "$CLIENT_NAME" > "$CLIENT_DIR/$CLIENT_NAME.ovpn"

# Restart to apply
docker restart openvpn

• Config routing:

​

#!/bin/bash

# --- Configuration ---
# Name of your Docker container
CONTAINER_NAME="openvpn"

# Base paths inside the container
BASE_PATH="/etc/openvpn"
CCD_DIR="$BASE_PATH/ccd"
SERVER_CONF="$BASE_PATH/openvpn.conf"

# Temporary directory on the HOST
TEMP_DIR="/tmp/openvpn_config"

echo "--- OpenVPN Injection Setup ---"

# 1. Ask for inputs
read -p "Enter the Client Common Name (CN): " CLIENT_CN
read -p "Enter Target Subnet (e.g., 192.168.1.0): " TARGET_NET
read -p "Enter Subnet Mask (e.g., 255.255.255.0): " TARGET_MASK

# 2. Prepare temporary directory on host
mkdir -p "$TEMP_DIR/ccd"

# 3. Create the CCD file locally
echo "iroute $TARGET_NET $TARGET_MASK" > "$TEMP_DIR/ccd/$CLIENT_CN"

# 4. Inject the CCD file into the container
echo "Injecting CCD file into the container at $CCD_DIR/$CLIENT_CN..."
docker cp "$TEMP_DIR/ccd/$CLIENT_CN" "$CONTAINER_NAME:$CCD_DIR/$CLIENT_CN"

# 5. Fetch, update, and inject the server config
echo "Updating configuration at $SERVER_CONF..."
docker cp "$CONTAINER_NAME:$SERVER_CONF" "$TEMP_DIR/openvpn.conf"

if ! grep -q "route $TARGET_NET $TARGET_MASK" "$TEMP_DIR/openvpn.conf"; then
    echo "Adding route to configuration..."
    echo "route $TARGET_NET $TARGET_MASK" >> "$TEMP_DIR/openvpn.conf"
    docker cp "$TEMP_DIR/openvpn.conf" "$CONTAINER_NAME:$SERVER_CONF"
else
    echo "Route already exists in $SERVER_CONF."
fi

# 6. Clean up and restart
rm -rf "$TEMP_DIR"
echo "Restarting the OpenVPN container..."
docker restart "$CONTAINER_NAME"

echo "Setup complete. Routing is active."

Hi everyone,

I am trying to set up a WireGuard VPN server on an ASUS router (cascaded behind a Fritz!Box) to access my local home network from outside. My ISP connection uses DS-Lite/IPv6.

My current setup:

• Fritz!Box (Main Router): Acts as the gateway. IPv6 Prefix Delegation is active.
• ASUS Router (Cascaded): The WAN port correctly receives a public IPv6 prefix (2a02:...) from the Fritz!Box.
• WireGuard (ASUS): Server is active, local network is 192.168.0.0/24, "Access Intranet" is enabled.
• Port Forwarding: In the Fritz!Box, I have configured a UDP port forwarding rule for port 51820, pointing to the ASUS router's public IPv6 (GUA 2a02:...).

The situation:

• The ASUS router correctly displays its public IPv6 address on the WAN interface.
• The WireGuard client on my notebook is configured with the correct endpoint ([2a02:...]:51820).
• The configuration (Peer, Allowed IPs: 10.6.0.0/24, 192.168.0.0/24) seems logically sound.

The problem: When I activate the tunnel, the WireGuard handshake gets stuck/loops infinitely

Why is it so difficult for NTs (especially the obnoxious ones) to accept the simple idea that if they leave me alone, don't talk about me and completely ignore me, I would do basically nothing and stick to myself? Are they just dumb or too ignorant?

How do you deal with this or what are your strategies?

I got diagnosed with aspergers syndrome like a month ago, which explains a lot of things to me. I'm living in southern germany and have the impression people try to get rid of me, both in my work place and private life. On top of that, I got told I am pretty handsome and I'm highly functional simultaneously. I feel like this combined with aspergers is pure hell. My idea was to move to the Scandinavian countries, Japan or other places where autism seems to be generally more accepted. I'm just tired of masking and peoples reactions to it, the constant social noise and all the expectations people have or take for granted. It completely drains my energy and I want to be just by myself literally all day every day. I used video games as a safe space which started to drag me into these ridiculous politics wars and it somehow managed to get into my real life, especially in Germany this is annoying as hell. Additionally there have always been people who hated me because of my extreme focus and abilities regarding abstract logic while not being able to socialize properly, so it's a a found feast for them. I'm really starting to hate people.