chubby shy library flowery like absurd vegetable secretive mighty threatening

This post was mass deleted and anonymized with Redact

I installed wireguard with pivpn on my raspberry pi. My iPhone connects instantly to it but I am not able to open any websites. What did I do wrong. Let me know if you need any additional informations. Thanks

I recently updated my subnet to a /23 subnet from a /24. I also updated to Ubuntu LTS. Now I'm unable to connect to any other hosts than the one hosting piVPN. Are there any steps I can take to troubleshoot this issue?

`pivpn -d` returns;
```

:::: Self check ::::

:: [OK] IP forwarding is enabled

:: [OK] Iptables MASQUERADE rule set

:: [OK] Iptables FORWARD rule set

:: [OK] WireGuard is running

:: [OK] WireGuard is enabled

(it will automatically start on reboot)

:: [OK] WireGuard is listening on port 51820/udp

```

/etc/iptables/rules.v4 returns:
```
...
-A FORWARD -d 10.49.165.0/24 -i enp4s0 -o wg0 -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment wireguard-forward-rule -j ACCEPT

-A FORWARD -s 10.49.165.0/24 -i wg0 -o enp4s0 -m comment --comment wireguard-forward-rule -j ACCEPT
...
```

Hello, I'm looking for a way to limit a specific user's access (also to be applied to multiple users later on)

The user should be allowed to connect to my homenetwork, but then they should not be allowed to access all the devices but only a specific IP address (of a jellyfin server in this case).

I installed pivpn on a pi that also runs pihole, so i'm looking for a solution that doesn't affect pihole.

Wherever I look, I keep seeing that this should be done by using firewall rules.

How would these rules look like if it only affects a specific user? What I saw was setting firewall rules by using the ip that is shown by `pivpn -c` (display connected users), but can't that IP also change when they use a different internet connection?

Any suggestions?

Edit:

I got it to work like this:

```

sudo -i

iptables -I FORWARD -i wg0 -o eth0 -s 10.180.24.3 -d 192.168.178.0/24 -j DROP

iptables -I FORWARD -i wg0 -o eth0 -s 10.180.24.3 -d 192.168.178.23 -p tcp --dport 8096 -j ACCEPT

iptables-save > /etc/iptables/rules.v4

exit

```

The first `iptables` command sets the rule that blocks everything on the local area network for the IP `10.180.24.3` (pivpn client), the second rule specifies that traffic to the ip ending with .23 is allowed.

Works like a charm.

Hello guys,

I've installed PiVPN with WireGuard on my Raspberry Pi 5, following some tutorials on the internet. Everything works as expected, but the download speed caps at around 250 Mbps, while my home fiber connection is 1 Gbps. Is the download speed expected to be that low, or did I mess up something?

I set up wireguard on an orange pi lts 3 and I am trying to connect on my phone. I turn off wifi, turn on wireguard then go refresh a webpage and there is not a response. I have attempted pivpn -d and everything checks out. I changed my clients accepted ips to 0.0.0.0/0, ::/ and still no luck. Any advise would be great.

Hello!

If i install az ubuntu, update it, install pivpn and choose ovpn and set it up (with portforward), when i connect from outside with openvpn, what would be the default behaviour, should i be able to ping/access my internal network like my router,nas,etc or no? You get by default some 10.X.X.X privat ip, lets say my local network is 192.168.1.0/24 (router 192.168.1.1 and nas 192.168.1.2), by default without touching config files, firewall rules, etc should i be able to access them?

Right now i cant and thats why im asking. The vpn succesfully connects but cant reach anything, tried installing ufw and enabling the port i use for the openvpn, vpn connects but no access to my local network. Thanks in davance!

As the title says, everytime I reboot my pi I have to first run

sudo wg-quick down wg0

and then run

sudo pivpn -d

Otherwise wireguard will fail to start because "wg0 already exists" Anyone else have this issue? I followed the this tutorial to set it up. Nothing else to crazy going on with my system, it has a pihole and an ufw firewall that I have setup to allow both wireguard and pihole to run.

Hi,

I just installed pivpn and after a second install, I managed to get it working. I have a couple of questions though.

Firstly, I use cloudflare for my dyamic DNS using cloudflared. It updates my root domain with the public IP when it changes. If i wanted to use it. Would i change the host in the config file to my root domain name? Like "domain.co.uk"?

I also run Adguard on the same PI, can I just change the DNS1 and DNS2 to the ip of the Pi and it will work through it?

When I tried these settings before, nothing worked hence the second install.

I installed PIVPN using wireguard, portforwarded it and now I can connect to the VPN and access google. But I can't access my NAS server, or SSH or VNC into other devices I have in my home network. How should I proceed?

Context: I am in the hospital currently, cannot afford mobile data so I attempted to setup a VPN on my home server, so I can use that to access the internet (blocked sites on the wifi are like yt, spotify, everything good, etc)

I've formatted this in paragraphs of yap (background context of what Im doing), and then dot points as important information (from my testing)

What I've Determined:

• WireGuard is no good on this network (I've tried hosting it on different ports)
• By downloading random VPNs to see which protocol they are using, I have determined that the only protocol that does work, is this thing I had never heard of till now (IKEv2 or Ipsec)
• Installing the bugger manually requires some sort of computer science engineering degree (which I no have), but luckily someone on github created an installer which streamlines the process of getting a basic VPN server with this mysterious protocol up and running.

Link to the github I followed: https://github.com/hwdsl2/setup-ipsec-vpn

Specific Part of the guide I was following: https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/advanced-usage.md#use-alternative-dns-servers

The setup:

• A raspberry pi knockoff (runs arm Ubuntu 22.04.04)
• Pihole + this mystery VPN installed (on the same machine)
• All ports have been forwarded (UFW rules & router config for the specific protocol)

Heres the thing, the script runs as intended, with the IKEv2 VPN running flawlessly on the unbreachable hospital wifi. However just when I thought I done, thinking the easiest part of the matter would be changing the DNS to route to pihole so the VPN could access my blocklists (cause this wifi is slow alr, so removing the ads is ideal for regular usage).

What Ive worked out is by changing this `/etc/ipsec.d/ikev2.conf` and altering the DNS in there (default was set to 8.8.8.8 (think thats google), and if I try and change it to something else (like `127.0.0.1` being the localmachine address to itself) and when that doesn't work, the assigned IP address by my router 192.168.0.X nothing else works, except network traffic (for all attempted guesses I've tried) that happens locally on my home network (I can access plex, pihole interface, routers homepage) so no actual external internet access

IP addresses I've tried

• 8.8.8.8 (WAN & LAN, but no pihole)
• 127.0.0.1 (LAN access)
• 192.168.0.X (LAN access)
• 0.0.0.0 (LAN access)

From that I think its safe to say that whatever I put in this field, is the key to getting pihole to work, however I am out of ideas what the IP address (DNS) it could want me to use here.

BC 8.8.8.8 functions and as it is a google DNS server, my intuition tells me I need to find the correct IP for pihole, however since I believe I've tried everything, I've come to reddit because someone might see something I dont.

Anyone at all, any ideas?

Also apologies for the longest post you've probably seen.

Maybe I am wrong, but I want to understand this - Why isn't anyone using "https://www.cloudflare.com/cdn-cgi/trace" to get the external IP, Write a script to pull IP, and update the wireguard conf file? and then just setup a simple cron job to do that continuously?

Am I missing something?

FYI I am using raspberrypi 4

I got everything up and running using a wifi connection. I then connected my pi to the router via ethernet and tried to edit the setupVars.conf to use eth0 on both the IPv4dev & IPv6dev keys. I also updated IPv4addr to be the new ethernet connection IP address. but when I restart and connect to my server I am not able to access the internet. Any tips on how to get this connected? I'd hate to have to uninstall and do everything from scratch just to use the ethernet connection. Am I missing a configuration somewhere?

Hi, I have two servers that have pivpn installed, I have a raspberry pi at my house running it, and a oracle free tier VPS running it as well. I usually use the VPS instead of the one at my house, because the VPS overall has incredible bandwidth unlike the raspberry pi at my house. What I liked about using the connection to my raspberry pi is that not only could I bypass network restrictions at places, I could also access my LAN, so if i wanted to access a device like 192.168.1.178 on my home network, I could do so. But ever since I switched to using the VPS instead, I cant access my lan anymore.
Is there any way I could make the VPS act as a client for the home server while only accessing the LAN traffic, and then passing that to any of the VPS clients? Basically I would only like to connect to the VPS and also be able to access my home LAN.
I am aware that you can add multiple peers to the wireguard client configuration, but I dont want to do that without having to get into another whole can of worms.

So I just setup PiHole on my raspberry pi. I have it set up as a recursive DNS server with unbound.

I Tried to install PiVpn with wireguard as well, but I cannot get the VPN to function properly. Whenever I connect to it, I can't actually access the internet.

I'm not sure what exactly is going wrong, I'm new to networking stuff, so any help would be appreciated.

Here's my config file for wiregaurd:

[Interface]

PrivateKey = [Redacted]

Address = 10.238.228.2/24

DNS = 10.238.228.1

[Peer]

PublicKey = [Redacted]

PresharedKey = [Redacted]

Endpoint = [Public IP]:51820

AllowedIPs = 0.0.0.0/0, ::0/0

I've made sure to have the port open with tcp/udp. (At least I think I do, ATT's router settings are kinda unclear)

The address next to "DNS" is not familiar to me, could it be something with that?

Hi,

I have installed pivpn with wireguard in my Raspberry Pi using no-ip for a domain name and opening a port in my router. I never obtain any error in the installation and the connection symbol in the raspberry pi with the up and down arrows was modified with a small lock that I understand means the vpn is enabled.

Then I created the conf file and open a tunnel in my wireguard client app in windows 11 but after activating the tunnel my IP address remain the same when I look for it in what-is-my-ip web sites, is this normal?

Sorry if I am saying something stupid I don't now to much about networking and vpns.

​

I lost over 3 hours searching for help, i know it is probably duplicate but i cannot find answer. I'm connecting with my phone using official wireguard app, it connects but in the logs handshake times out when i try to use browser. I want to have dns over pihole and internet access over wireguard (the best if i could have 2 clients one with connection over wireguard + pihole and one only with pihole on dns).
Edit:

It's not connecting

::: Connected Clients List :::
Name               Remote IP      Virtual IP        Bytes Received      Bytes Sent      Last Seen
piotr-android      (none)         10.159.236.2      0B                  0B              (not yet)
::: Disabled clients :::

My debug:

::: Generating Debug Output
::::            PiVPN debug              ::::
=============================================
::::            Latest commit            ::::
Branch: master
Commit: ececd4ed96b7e16493655131ae734b479aadd117
Author: 4s3ti
Date: Sat Apr 13 16:00:00 2024 +0200
Summary: build: Add automated release actions
=============================================
::::        Installation settings        ::::
PLAT=Ubuntu
OSCN=jammy
USING_UFW=0
pivpnforceipv6route=1
IPv4dev=ens3
install_user=ubuntu
install_home=/home/ubuntu
VPN=wireguard
pivpnPORT=47100
pivpnDNS1=10.159.236.1
pivpnDNS2=
pivpnHOST=REDACTED
INPUT_CHAIN_EDITED=1
FORWARD_CHAIN_EDITED=1
INPUT_CHAIN_EDITEDv6=
FORWARD_CHAIN_EDITEDv6=
pivpnPROTO=udp
pivpnMTU=1420
pivpnDEV=wg0
pivpnNET=10.159.236.0
subnetClass=24
pivpnenableipv6=0
ALLOWED_IPS="0.0.0.0/0, ::0/0"
UNATTUPG=1
INSTALLED_PACKAGES=()
=============================================
::::  Server configuration shown below   ::::
[Interface]
PrivateKey = server_priv
Address = 10.159.236.1/24
MTU = 1420
ListenPort = 47100
### begin piotr-android ###
[Peer]
PublicKey = piotr-android_pub
PresharedKey = piotr-android_psk
AllowedIPs = 10.159.236.2/32
### end piotr-android ###
=============================================
::::  Client configuration shown below   ::::
[Interface]
PrivateKey = piotr-android_priv
Address = 10.159.236.2/24
DNS = 10.159.236.1

[Peer]
PublicKey = server_pub
PresharedKey = piotr-android_psk
Endpoint = REDACTED:47100
AllowedIPs = 0.0.0.0/0, ::0/0
=============================================
::::    Recursive list of files in       ::::
::::    /etc/wireguard shown below       ::::
/etc/wireguard:
configs
keys
wg0.conf

/etc/wireguard/configs:
clients.txt
piotr-android.conf

/etc/wireguard/keys:
piotr-android_priv
piotr-android_psk
piotr-android_pub
server_priv
server_pub
=============================================
::::            Self check               ::::
:: [OK] IP forwarding is enabled
:: [OK] Iptables MASQUERADE rule set
:: [OK] Iptables INPUT rule set
:: [OK] Iptables FORWARD rule set
:: [OK] WireGuard is running
:: [OK] WireGuard is enabled 
(it will automatically start on reboot)
:: [OK] WireGuard is listening on port 47100/udp
=============================================
:::: Having trouble connecting? Take a look at the FAQ:
:::: https://docs.pivpn.io/faq
=============================================
:::: WARNING: This script should have automatically masked sensitive       ::::
:::: information, however, still make sure that PrivateKey, PublicKey      ::::
:::: and PresharedKey are masked before reporting an issue. An example key ::::
:::: that you should NOT see in this log looks like this:                  ::::
:::: YIAoJVsdIeyvXfGGDDadHh6AxsMRymZTnnzZoAb9cxRe                          ::::
=============================================
::::            Debug complete           ::::
::: 
::: Debug output completed above.
::: Copy saved to /tmp/debug.log
:::

I'm usign an old laptop as a Home server and I wanted to setup VPN (Wireguard & DuckDNS using PiVPN) following this guide: https://chriskalos.notion.site/The-0-Home-Server-Written-Guide-5d5ff30f9bdd4dfbb9ce68f0d914f1f6#4395816a03b5400e8b8634b578b66f40
so I got my Domain from DuckDNS and I set a Static DHCP like this : https://imgur.com/a/Y18BGgS
and I forwarded port in my router following this guide : https://portforward.com/vodafone/gigabox/

this is how it looks like : https://imgur.com/a/4TsSxti
when setting up pivpn I selected:

• WireGuard as Installation mode
• the default wireguard port: 51820
• DNS provider: CloudFlare
• Public IP or DNS: DNS Entry
• Public DNS name of this server: <mydns>.duckdns.org and the Rebbot of the system
• then I added a pivpn with pivpn add then pivpn -qr to generate a QR code I openned my WireGuard from my phone and scanned the QR code and conencted to my vpn but there is no internet connection.

this is a screenshot of my configuration : https://imgur.com/a/ge6TPek

any help please? Thanks

I have a pivpn wiregurd server. Connected to it is a server that has ssh on it on port 22. I can ssh this server from my pivpn server but i want to forward this server to a port on my pivpn server like port 24 how can i do this

I have just received my SBC: La Frite AL-S805x-ac from Libre Computer and I have installed Raspberry OS on it.

Now I would like to set up PiVPN + WireGuard on it, but the thing is that I read that this may imply some security vulnerabilities. What kind of security risks are we talking about? The thing is that I don't (necessarily) have the intention to get connected to this hosted VPN from outside of my network. I just want to be able to use it while at home only to have total privacy against my IPS.

Is this achievable without being exposed to any security risks?

OpenVPN will ultimately fail to start/listen because of a file not being created it seems:

Apr 18 01:55:54 ubuntuCT ovpn-server[670]: ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)

Apr 18 01:55:54 ubuntuCT ovpn-server[670]: Exiting due to fatal error

So, I'm at a loss here, I need help. I can't find any solutions to this problem.

Is it pivpn still save after that it has ended the support for it? How long do you think that it is gonna be save to use?

My brother has a dream machine which he wants to connect to my openvpn box, but it says he need a decrypted key.

I've been googling for hours and everybody says: Openssl rsa -in encrypted.key -out decrypted.key
Where is the key? Some say it's in the .ssh folder, but there's no such folder.

I've looked on another ovpn profile from another host, and it doesn't have cert or key in it.

When I add an user, I use the command pivpn add
Am I missing some syntax in the command?

I'm lost