3 ms·

Hi, thanks for your feedback. Can you submit a github issue? I need to establish a traffic testing method for assessing whether any traffic is leaking. This wou

• tribby 10y ago
  testing is a good idea, and I've seen it done in other "road warrior" type scripts in an unsafe way via `curl -s6 https://canhazip.com` https://canhazip.com`. I may not have the time to contribute for a while, but what I would contribute is mostly laid out in the openvpn docs for enabling ipv6[0]. most of what you need to do with ipv6 is analagous to what you'd do with ipv4 like remembering to uncomment net.ipv6.conf.all.forwarding=1 in /etc/sysctl.conf ( just as you would with net.ipv4.ip_forward). use tun-ipv6 instead of tun, and server-ipv6 in addition to server. ip6tables rules in addition to iptables rules. etc etc. although that may be it -- can't think of anything else of the top of my head. I'll look more at your code and see if there's anything I can help with as time allows- ping me if I forget :) 0. https://community.openvpn.net/openvpn/wiki/IPv6 https://community.openvpn.net/openvpn/wiki/IPv6
  • tomschlick 10y ago
    Would love to see those additions made to this script: https://github.com/Nyr/openvpn-install https://github.com/Nyr/openvpn-install
    • tribby 10y ago
      wow, I admire the dedication to supporting multiple operating systems, but that script is a mess IMHO. why is there a hardcoded version of easyrsa? I haven't worked with easyrsa in a while but does it still do 1024 bit dh parameters by default? because that would also be a mistake. it looks like there is sufficient interest, so maybe I'll cobble together a bash script.