Closed About openvpn server remote and proxy all in one public ip

[jknee00]

dev tun
proto tcp
remote public-ip 443
cipher AES-128-CBC
auth SHA1
resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass userpass.txt
keepalive 1 180
http-proxy public-ip 3128
http-proxy-retry
http-proxy-timeout 3
http-proxy-option CUSTOM-HEADER CONNECT HTTP/1.1
http-proxy-option CUSTOM-HEADER HOST host
http-proxy-option CUSTOM-HEADER X-ONLINE-HOST host
http-proxy-option CUSTOM-HEADER X-Forward-For host

1 vps for both vpn server and proxy server

prefered for VPS is DO...na try kona lahat , sa akin lang mas OK si DO or digital ocean
using PAYMAYA or GCASH you can easily reg. at DO VULTR LINODE....or sa pinakamurang vps provider try to search lowendboxes sa google...

assuming you had already reg. at DO..then you have to choose a droplet...
because bago ka lang eh yung 5$ na droplet lang muna...

i prefered to use softethervpnserver....simple , stable at easy to manage

a complete guide on how to build a softethervpnserver...

https://www.YøùTùbé.com/watch?v=1jgv5cDBeXs

just ignore the tuts about squid proxy...pweding di na kayu maghanap pa
sa mismong droplet na me vpnserver na tayu gumawa...

a simple codes of creating a squid proxy using thesame ip with the openvpn server

apt-get update && apt-get upgrade -y

apt-get install squid apache2-utils -y

cp /etc/squid/squid.conf /etc/squid/squid.conf.bak

type this command to erase content script:
echo '' > /etc/squid/squid.conf
nano /etc/squid/squid.conf

http_port 3128

#default lng siya 3128 pde mo palitan port 8080,80 ikaw bahala ang gusto mo port
cache deny all
hierarchy_stoplist cgi-bin ?
access_log none
cache_store_log none
cache_log /dev/null
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

acl vpnservers dst 45.024.14.24
#45.024.14.24 palitan mo ip na ito sa ip na gagamitin mo or un vps server ip mo.
acl vpnservers dst 127.0.0.1

acl Safe_ports port 22
acl SSL_ports port 22
acl Safe_ports port 443 # https


acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
#auth_param basic children 5
#auth_param basic realm Squid Basic Authentication
#auth_param basic realm Squid proxy-caching web server
#auth_param basic credentialsttl 2 hours
#acl password proxy_auth REQUIRED
http_access allow localhost
#http_access allow password
#http_access deny all
http_access allow vpnservers
http_access deny !vpnservers


http_access allow all
forwarded_for off


/etc/init.d/squid restart




iptables -I OUTPUT -p tcp --sport 3128 -j DROP && iptables -I OUTPUT -p tcp --sport 3128 -m quota --quota 500000000000 -j ACCEPT

iptables -I OUTPUT -p tcp --sport 5228 -j DROP && iptables -I OUTPUT -p tcp --sport 5228 -m quota --quota 500000000000 -j ACCEPT

iptables -I OUTPUT -p tcp --sport 1379 -j DROP && iptables -I OUTPUT -p tcp --sport 1379 -m quota --quota 500000000000 -j ACCEPT

iptables -I OUTPUT -p tcp --sport 8080 -j DROP && iptables -I OUTPUT -p tcp --sport 8080 -m quota --quota 500000000000 -j ACCEPT


iptables -I OUTPUT -p tcp --sport 443 -j DROP && iptables -I OUTPUT -p tcp --sport 443 -m quota --quota 500000000000 -j ACCEPT


iptables -I OUTPUT -p tcp --sport 22 -j DROP && iptables -I OUTPUT -p tcp --sport 22 -m quota --quota 1000000000000 -j ACCEPT



iptables -nvL -t filter --line-numbers

dpkg-reconfigure tzdata



crontab -e
paste mo ito sa pinaka baba last part 12am ng madaling araw mag rerestart ang squid/RP.
00 * * * * /etc/init.d/squid restart >> /var/log/r-squid.log 2>&1

 

[PesteM DiabolicaE]

para saan po ang crontab

 

[PHC-Jayar]

Paano to bat ang dameng codes

 

[PHC-Jayar]

Ito lang naman yung laman ng ovpn

dev tun
proto tcp
remote public-ip 443
cipher AES-128-CBC
auth SHA1
resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass userpass.txt
keepalive 1 180
http-proxy public-ip 3128
http-proxy-retry
http-proxy-timeout 3
http-proxy-option CUSTOM-HEADER CONNECT HTTP/1.1
http-proxy-option CUSTOM-HEADER HOST host
http-proxy-option CUSTOM-HEADER X-ONLINE-HOST host
http-proxy-option CUSTOM-HEADER X-Forward-For host

Eh paano yung mga nasa baba

 

[trueblood06]

Thankyou boss ^_^

 

[adema]

anhaba ng script. pag aralan ko to maya. thanks ts..

 

[PHC-JET44]

Ito lang naman yung laman ng ovpn

dev tun
proto tcp
remote public-ip 443
cipher AES-128-CBC
auth SHA1
resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass userpass.txt
keepalive 1 180
http-proxy public-ip 3128
http-proxy-retry
http-proxy-timeout 3
http-proxy-option CUSTOM-HEADER CONNECT HTTP/1.1
http-proxy-option CUSTOM-HEADER HOST host
http-proxy-option CUSTOM-HEADER X-ONLINE-HOST host
http-proxy-option CUSTOM-HEADER X-Forward-For host

Eh paano yung mga nasa baba

Tama yan lang eh sapat na openVPN makakaconnect kana. Wag ng gawin complicated kung pwede nmn simple lang.

 

[jknee00]

para saan po ang crontab

para mag restart restart si squid po...

 

[PHC - Abueva]

Confuse with the scripts, anyways thanks for sharing TS

 

[PHC-Graduate]

salamat sa info. i'll try this out pag me time. gusto ko din sananag mapagana .ovpn yong server ko salamat

 

[letsjustplay]

socks5 po ba pwede sa ovpn?

 

[PHC-Jayar]

Tut sana ts bago to eh magulo para sa akin

 

[Anoma]

Keep sharing!

 

[Exorsus]

interesting