Kali SSH Forward for VPN on Server

[Kali] SSH Forward for VPN on Server - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Linux (https://hackforums.net/forumdisplay.php?fid=85)
+---- Thread: [Kali] SSH Forward for VPN on Server (/showthread.php?tid=5559555)

SSH Forward for VPN on Server - Anne Marie - Feb 24, 2017

If im using SSH Connection on my Server and starting Ovpn connection Im timing out. I already read that i need to add Rules for that but i dont understand how to do it.

Code 
user@home:# ifconfig

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 9001

        inet 172.31.36.123  netmask 255.255.240.0  broadcast 172.31.47.255

        inet6 fe80::45b:cdff:fea7:e8e9  prefixlen 64  scopeid 0x20<link>

        ether 06:5b:cd:a7:e8:e9  txqueuelen 1000  (Ethernet)

        RX packets 1037  bytes 94831 (92.6 KiB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 1073  bytes 122660 (119.7 KiB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536

        inet 127.0.0.1  netmask 255.0.0.0

        inet6 ::1  prefixlen 128  scopeid 0x10<host>

        loop  txqueuelen 1  (Local Loopback)

        RX packets 0  bytes 0 (0.0 B)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 0  bytes 0 (0.0 B)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

user@home:~# route

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

default         ip-172-31-32-1. 0.0.0.0         UG    0      0        0 eth0

172.31.32.0     0.0.0.0         255.255.240.0   U     0      0        0 eth0

How can i do it?

* - captainspalding - Feb 24, 2017

(Feb 24, 2017 05:09 AM)Bundespolizei Wrote: If im using SSH Connection on my Server and starting Ovpn connection Im timing out. I already read that i need to add Rules for that but i dont understand how to do it.

Code
user@home:# ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 9001 inet 172.31.36.123 netmask 255.255.240.0 broadcast 172.31.47.255 inet6 fe80::45b:cdff:fea7:e8e9 prefixlen 64 scopeid 0x20<link> ether 06:5b:cd:a7:e8:e9 txqueuelen 1000 (Ethernet) RX packets 1037 bytes 94831 (92.6 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1073 bytes 122660 (119.7 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1 (Local Loopback) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 user@home:~# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default ip-172-31-32-1. 0.0.0.0 UG 0 0 0 eth0 172.31.32.0 0.0.0.0 255.255.240.0 U 0 0 0 eth0

How can i do it?

You mean you're getting idle timed out? Broken pipe?

* - Anne Marie - Feb 24, 2017

(Feb 24, 2017 07:29 PM)captainspalding Wrote: You mean you're getting idle timed out? Broken pipe?

Yes correct.

* - captainspalding - Feb 24, 2017

(Feb 24, 2017 09:41 PM)Bundespolizei Wrote: Yes correct.

I was having this same issue with DO droplets and AWS instances. These boxes would break pipe every 60s. My fix was to add the following line at the bottom of my client's /etc/ssh/ssh_config

Code 
ServerAliveInterval 50

This sends a keepalive every 50 seconds.
Just to reiterate, this is on the client SSH config, not the server.

I first tried messing with the following two lines on the server's config, /etc/ssh/sshd_config:

Code 
ClientAliveInterval 28800

ClientAliveCountMax 3

But without adding the line in the client side config it did not work.