remove nobind

[markval]

Hi guys,

I am trying to remove nobind and use lport rport instead while using Client openVPN connection.

I am removing the nobind from config.ovpn but it seems to always come back.
If I put lport and rport in the custom config they wont be accepted since nobind is there already.

Any ideas?

Thank you!

 

[markval]

Looks like the GUI function always writes the nobind.

Anyways to find where this is executed and replace the original config script?

 

[markval]

Do I need to recompile if I want to make change in :

https://github.com/RMerl/asuswrt-me...c122614e7a1fd/release/src/router/rc/openvpn.c

I want to remove line 222 fprintf(fp, "nobind\n");

?

Thank you

 

[RMerlin]

You would need to recompile the firmware to change this. Otherwise, you will have to provide your own config file, and manually launch your client instead of having the firmware handle it automatically.

 

[markval]

Hi RMerlin,

Thank you for your answer.

Where should I put the config file and how can I launch manually the client?

Thank you!

 

[RMerlin]

Hi RMerlin,

Thank you for your answer.

Where should I put the config file and how can I launch manually the client?

Thank you!

You will need to manually configure everything on the openvpn side of things. Unfortunately I have never really worked with OpenVPN under Linux, so I can't guide you on the details.

At least a good starting point would be to make a backup of a config file generated by the webui. Save it either on a USB disk or in the jffs partition, then point your openvpn client to that config. Also make a copy of the cert/keys generated by the firmware when it launches the client, so you can reuse them.

I might consider making the nobind option configurable in the future since it prevents users from going with particular setups that require user-specified ports.

 

[markval]

I am recompiling the firmware at the moment for RT-AC56U with changes.

Im on Ubuntu64bit which mean I had to install the 32bit of libelf using:

sudo apt-get install libelf1:i386

Also the PATH in the tutorial also target mips and not arm.
Would be great to add the difference fir future reference.

Regarding the nobind.
Instead of giving an option for it I would rather give a checkbox to completely ignore all the default options + gui options and give complete control to the Custom Configuration

Thank you

 

[RMerlin]

I am recompiling the firmware at the moment for RT-AC56U with changes.

Im on Ubuntu64bit which mean I had to install the 32bit of libelf using:

sudo apt-get install libelf1:i386

Also the PATH in the tutorial also target mips and not arm.
Would be great to add the difference fir future reference.

Regarding the nobind.
Instead of giving an option for it I would rather give a checkbox to completely ignore all the default options + gui options and give complete control to the Custom Configuration

I haven't documented the ARM build directions yet because Asus hasn't finalized the merge, so I didn't want to provide instructions for the way I was doing it, and have to rewrite everything again once they do the final merge of both branches.

Having a checkbox to totally ignore it isn't necessary. A custom config could be implemented the same way it currently is for other custom config files, where it automatically gets used if it does exist.

 

[markval]

Just to say that all went well and I added a few security features on top for our setup with ease. The tun is up and running.

Thank you

 

[develox]

Just a small up to check whether there currently is any solution other than recompile the fw to set an lport on the client (which keep going in conflict with the pre-build nobind option I can't spot where to remove it from).

Thanks
Peppe

 

[RMerlin]

Just a small up to check whether there currently is any solution other than recompile the fw to set an lport on the client (which keep going in conflict with the pre-build nobind option I can't spot where to remove it from).

Thanks
Peppe

Use a postconf script to modify the config generated by the router:

https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files

 

[develox]

Use a postconf script to modify the config generated by the router:

https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files

Thanks a lot Eric, I'm already working and can't close terminals and clients to start/stop the vpn. I'll certainly give it try when I'm done tonight.

Peppe

 

[develox]

Thanks a lot Eric, I'm already working and can't close terminals and clients to start/stop the vpn. I'll certainly give it try when I'm done tonight.

Peppe

And, of course, it worked. Thanks a lot Eric.

Peppe