| 00:58.45 | *** join/#gllug ibot (ibot@rikers.org) |
| 00:58.46 | *** topic/#gllug is Welcome to the Greater London Linux User Group IRC channel | http://www.gllug.org.uk |
| 01:48.13 | *** join/#gllug Leeds (~richardc@n219078059240.netvigator.com) |
| 09:08.25 | *** join/#gllug zplinux (~zplinux@213.8.57.217) |
| 09:08.29 | zplinux | hi |
| 09:09.07 | zplinux | assuming my networking is: PC -> ISP GW -> L2TP GW ->internet |
| 09:09.33 | zplinux | can I establish a openvpn udp connection to the pc ip not using the l2tp address? |
| 09:51.52 | *** join/#gllug sabinef72 (~sabinef72@ns.popipo.fr) |
| 10:56.55 | antiphase | o.O |
| 11:11.47 | *** join/#gllug an0key (~an0key@n0rty.an0key.net) |
| 11:11.59 | *** join/#gllug marcus_ (~marcus@lenny.uk-debtcollection.com) |
| 11:11.59 | *** join/#gllug jpds (~jpds@ubuntu/member/jpds) |
| 11:48.54 | zplinux | antiphase? |
| 11:51.20 | antiphase | I just wondered what you were talking about. It wasn't really very clear :P |
| 11:51.32 | zplinux | o ok |
| 11:51.56 | zplinux | I connect to the internet using eth0 and get an IP address from my ISP |
| 11:52.02 | antiphase | Most people don't need to know what goes on in their ISP's network; it just does |
| 11:52.19 | zplinux | I then establish vpn to a server and get a new IP address toward the internet |
| 11:52.49 | antiphase | That already sounds odd |
| 11:53.16 | zplinux | I can't get a remote openvpn client to connect to my pc using the vpn address |
| 11:53.55 | antiphase | Probably because it's not possible to send traffic to your PC frmo the Internet, most likely becasue of NAT |
| 11:54.17 | antiphase | Difficult to say without more information though |
| 11:54.22 | zplinux | antiphase: I am using l2tp to gain a forigen IP address then when I surf I appear as coming from that geographic regain |
| 11:55.13 | zplinux | yes, lets assume that forgain vpn , is sharing that IP address, and not providing portforwarding back |
| 11:55.39 | zplinux | can I still except traffic using the IP address my ISP provided? |
| 11:55.41 | antiphase | You either need to initiate the VPN connection in the other direction, or do port forwarding or some other hack |
| 11:56.21 | antiphase | There are always ways of making things work, but without detailed information about your setup, it's not possible to say |
| 11:56.26 | zplinux | I dont want to use the forgain address for my own vpn |
| 11:56.56 | zplinux | what other info do you need? |
| 11:57.58 | antiphase | I'm guessing that your L2TP VPN is reassigning your default route so all traffic passes over it. There's nothing stopping you using your actual address from your ISP as long as it's routable; you'll just need to add routes to make the traffic take the correct path |
| 11:58.45 | zplinux | I got the ISP as default gateway as well as the l2tp gateway |
| 11:58.53 | antiphase | What's probably happening at the moment is that traffic inbound to your PC is arriving correctly, but return traffic leaves via L2TP |
| 11:59.03 | zplinux | but the ISP gw has a higher metric |
| 11:59.04 | antiphase | Well, you can only have one default gateway ;) |
| 11:59.13 | antiphase | So it will never be used |
| 11:59.54 | zplinux | so I need to tell the routing table to go via the ISP gw with openvpn traffic? |
| 12:00.16 | zplinux | or using the remote IP that want s to connect as client to me |
| 12:00.42 | antiphase | Yes. You'll probably end up needing 2 routing tabels, and use iptables to mark openvpn traffic, because plain routing can't be traffic-sensitive |
| 12:01.31 | zplinux | and what if I want to use openvpn with udp and not tcp - will this effect the solution? |
| 12:01.36 | antiphase | No |
| 12:02.21 | zplinux | so all I need is a line in the routing to send traffic to the client subnet (as I know the ISP it is using) via the ISP gw |
| 12:02.45 | zplinux | otherwise I can tag the packets, then route them using the ISP gw |
| 12:02.48 | antiphase | If your openvpn traffic always originates from a known range, that's the easiest solution |
| 12:02.57 | zplinux | right |
| 12:02.59 | zplinux | ok |
| 12:03.26 | zplinux | so basiclly networking is very simple |
| 12:03.34 | zplinux | in the broad sense |
| 12:03.44 | antiphase | The principles of it are generally very simple |
| 12:04.29 | zplinux | the other question has to do with a network appliance I can't reach |
| 12:04.44 | zplinux | I set it to a static IP address |
| 12:07.23 | antiphase | wonders if there's anything else |
| 12:09.24 | zplinux | yes (but a guy is calling me and I need to service him, min) |
| 12:09.30 | antiphase | chuckles |
| 12:09.45 | Leeds | antiphase: watch it :) |
| 12:09.47 | zplinux | ok, the address I gave it is in the lan subnet but he gw, was wrong |
| 12:10.29 | zplinux | is there any reason why I shouldnt "see" the host if I am pinging it from that subnet? |
| 12:11.05 | antiphase | No reason at all |
| 12:11.55 | zplinux | so it must have reset to default settings.... |
| 12:11.59 | zplinux | hi leeds |
| 12:12.19 | zplinux | is anyone here coming to fosem? |
| 12:12.30 | zplinux | leeds: I got good news |
| 12:15.29 | Leeds | yes? |
| 12:15.57 | Leeds | I'm going to be in Korea around FOSDEM, assuming it's still there... |
| 12:17.13 | zplinux | leeds: I hope to talk to you in four hours |
| 12:17.35 | Leeds | okay... might be in bed in four hours |
| 12:17.40 | Leeds | will be in Israel in September... |
| 12:17.54 | zplinux | too late |
| 12:18.10 | Leeds | hmm? |
| 12:18.10 | zplinux | I wanted to talk to you for some time |
| 12:18.41 | zplinux | and now, I got this thing I want your opinion |
| 12:19.25 | zplinux | should ssh home and use irssi from there... |
| 12:19.27 | zplinux | errr |
| 12:19.46 | zplinux | btw, my scripts have improoved, see gentoo bugzilla :-) |
| 12:30.53 | zplinux | lets add a line that will blink in red when the call center sip phones dont respond to ping, meaning the switch is down |
| 12:30.56 | zplinux | ... |
| 12:34.42 | antiphase | Genpoo |
| 15:06.02 | *** join/#gllug Provito (~Provito@cpc2-enfi16-2-0-cust322.hari.cable.virginmedia.com) |
| 18:37.03 | *** join/#gllug Armand (~me@cpc1-haye3-0-0-cust41.haye.cable.virginmedia.com) |
| 18:55.29 | *** mode/#gllug [+o Cope] by ChanServ |
| 18:58.50 | *** join/#gllug Armand (~me@cpc1-haye3-0-0-cust41.haye.cable.virginmedia.com) |
| 19:04.13 | *** join/#gllug Armand (~me@cpc1-haye3-0-0-cust41.haye.cable.virginmedia.com) |
| 19:16.26 | *** join/#gllug Armand (~me@cpc1-haye3-0-0-cust41.haye.cable.virginmedia.com) |
| 20:00.07 | *** join/#gllug boudiccas (~boudiccas@unaffiliated/boudiccas) |
| 20:33.12 | morsing | boudiccas! |
| 20:39.13 | *** join/#gllug ChoHag (~mking@109-170-148-201.xdsl.murphx.net) |
| 20:48.10 | *** join/#gllug ChoHag (~mking@109-170-148-201.xdsl.murphx.net) |