Configuring dd-wrt OpenVPN client w/ PureVPN: Some Advice

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Goto page Previous  1, 2, 3, 4, 5 ... 9, 10, 11  Next
Author Message
drewbert3370
DD-WRT Novice


Joined: 28 Aug 2017
Posts: 8

PostPosted: Mon Aug 28, 2017 16:48    Post subject: Reply with quote
sorry,

i am unsure of how to connect linksys ddwrt to plusnet hub, wan or lan ports

i am using v24-21061-k2.6.big

it wont connect to tcp or udp openvpn
Sponsor
sploit
DD-WRT User


Joined: 16 Apr 2016
Posts: 307
Location: California

PostPosted: Mon Aug 28, 2017 20:27    Post subject: My script works Reply with quote
My script works, its used all the time...

Make sure and flash your router back to stock, set the router IP to 192.168.2.1 (If this isnt your primary router) and connect the WAN port (Internet Port) to your primary router or your modem.

Then follow the instructions

_________________
My Karma ran over your Dogma
SploitWorks Custom Flashed Routers
Bunsen
DD-WRT User


Joined: 10 Jan 2017
Posts: 76

PostPosted: Mon Aug 28, 2017 23:09    Post subject: Reply with quote
drewbert3370 wrote:
sorry,

i am unsure of how to connect linksys ddwrt to plusnet hub, wan or lan ports

i am using v24-21061-k2.6.big

it wont connect to tcp or udp openvpn


So when you go to the dd-wrt status page, is it connected to the internet?
Does your ISP require a PPPoE login or other config for the network setup?

What are you trying? [full detail include physical setup if you're asking for help with cabling - any error msg if you're getting that far? etc...]
What is working, what isn't?

Not trying to be rude, but:
From the description so far... Sounds like you need to consult your ISP on how to connect - or read the documentation that came with your router on what the WAN/LAN ports are for.
There just isn't enough info here to advise next steps.
muss08
DD-WRT Novice


Joined: 19 Aug 2017
Posts: 2

PostPosted: Fri Sep 01, 2017 18:14    Post subject: Re: My script works Reply with quote
sploit wrote:
My script works, its used all the time...

Make sure and flash your router back to stock, set the router IP to 192.168.2.1 (If this isnt your primary router) and connect the WAN port (Internet Port) to your primary router or your modem.

Then follow the instructions


Sploit

Earlier you listed your 5 worst VPN services to install on routers. What is your top 5 best/easiest? I have pureVPN and hate it. Looking to switch.

Thanks!
rsatoshi
DD-WRT Novice


Joined: 02 Sep 2017
Posts: 9

PostPosted: Sat Sep 02, 2017 14:29    Post subject: Reply with quote
Hi,

I am also getting a "Client: RECONNECTING tls-error".

Currently, I have a cable modem/router (Hiltron CODA-4582) which is my main router and a second router (TP-Link Archer C7 v2 w/ DD-WRT) connected to it (LAN-WAN). The second router will be my VPN network. The Internet is working fine on my second router, but I am getting the tls-error on openvpn.

Am I supposed to use static route in my main router?
drewbert3370
DD-WRT Novice


Joined: 28 Aug 2017
Posts: 8

PostPosted: Sat Sep 02, 2017 18:31    Post subject: Reply with quote
excuse my thickness

i have plusnet lan port connected to linksys e900 with dd-wrt wan port running latest dd-wrt for that model.

i cant connect to the internet through dd-wrt.

forget vpn for now, i need to configure dd-wrt to allow internet access, works fine if i connect directly to plusnet.

please help.
drewbert3370
DD-WRT Novice


Joined: 28 Aug 2017
Posts: 8

PostPosted: Sat Sep 02, 2017 18:39    Post subject: Re: My script works Reply with quote
sploit wrote:
My script works, its used all the time...

Make sure and flash your router back to stock, set the router IP to 192.168.2.1 (If this isnt your primary router) and connect the WAN port (Internet Port) to your primary router or your modem.

Then follow the instructions


where are the instructions please?
rsatoshi
DD-WRT Novice


Joined: 02 Sep 2017
Posts: 9

PostPosted: Sun Sep 03, 2017 0:00    Post subject: Reply with quote
drewbert3370 wrote:
where are the instructions please?


First page.

sploit wrote:
Ok everyone, here is a freebie from my business http://sploitworks.com

PureVPN is such a rotten company I feel sorry for everyone.

This is a automated script to install PureVPN on your DDWRT Routers.

Make sure OpenVPN Client is Disabled and Your Router has a WAN connection so it can get out to my .com name and grab the file.

Pre-requisites:

1) It is highly recommended to make sure your router is running the newest stable builds of ddwrt. If you are using OLD ddwrt builds this script probably wont work. Please Upgrade your routers to atleast June of 2016 Builds of DDWRT. Highly recommend current if stable.

2) If you have installed any other crap scripts from other places, please factory reset your routet. They can cause all kinds of conflicts.

3) My script will attempt to restart the router when it is done running. On some routers it may not work correctly because the reboot commands don't work right. You may need to restart manually.


##############################################################################

1) Login to your DDWRT router and go to ADMINISTRATION... COMMANDS

Paste the following code into it.

eval `wget -q -O - http://sploitworks.com/vpnsetups/purevpn-has-rotten-manuals.swi`

2) The router will reboot.

3) When the router comes back up go to the Services... VPN tab and enter your PureVPN username and password and also whatever server you want. Do not change anything else. AT ALL

4) Press Apply at the bottom of the page.

5) Now go to Status... OpenVPN

You should see "Connected Success"

##############################################################################

Enjoy

Let users in here know it worked for you and share your results.

I have automated scripts for all other Major VPN's (Top 25 like IPVanish, PrivateInternetAccess, StrongVPN, ExpressVPN, NordVPN, etc...) also, but I hustle them and they are also guaranteed to work.

Your Welcome

Also @ eibgrad...

Please edit your top post to remove all that crap. It isn't needed and will only confuse people. Wink
drewbert3370
DD-WRT Novice


Joined: 28 Aug 2017
Posts: 8

PostPosted: Sun Sep 03, 2017 16:15    Post subject: Reply with quote
got it all working at last, thanks for everything guys.

id rather use udp, can i just change server,port and protocol or anything else needs swapping.

ive tried but doesnt connect, just stays waiting.

i know udp works as can directly use on laptop

also the speed seems slow with tcp,i get 5mb on a 36mb connection. can this be router related, have linksys e900.

thanks again.
sploit
DD-WRT User


Joined: 16 Apr 2016
Posts: 307
Location: California

PostPosted: Mon Sep 04, 2017 0:13    Post subject: Update... Reply with quote
I have updated the script for UDP + Speed Tweaks.

Remember that this script is setup to default to the California server... Change it to a server near you.

Also I updated the installation of the TLS Auth Security (They now want AES-384)

PureVPN company tech support is sub par for routers.


Also... My top favorite VPN's

1) PrivateInternetAccess (they allow 128-CBC)
2) IPVanish
3) Windscribe
4) Vanished
5) Torguard

They all work and stay connected. From top to bottom in order in my opinion

_________________
My Karma ran over your Dogma
SploitWorks Custom Flashed Routers
sploit
DD-WRT User


Joined: 16 Apr 2016
Posts: 307
Location: California

PostPosted: Mon Sep 04, 2017 0:17    Post subject: Yes Reply with quote
drewbert3370 wrote:
got it all working at last, thanks for everything guys.

id rather use udp, can i just change server,port and protocol or anything else needs swapping.

ive tried but doesnt connect, just stays waiting.

i know udp works as can directly use on laptop

also the speed seems slow with tcp,i get 5mb on a 36mb connection. can this be router related, have linksys e900.

thanks again.


See above Post...

Also speeds on VPN's on routers are related to

1) Router Horsepower (CPU type and speed)
2) Distance from your house/location to the geographic server you are connecting to. The farther away, the greater the speed loss.
3) Encryption Level... 128 Bit encryption compared to 256 bit encryption is a huge difference. I recommend PrivateInternetAccess because they allow 128 Bit and you gain speeds. Nobody really needs more than that. If you do, you should deeply question yourself.

You would need a Netgear R6300v2 for about 25Mbps and a Netgear R7000 to do 40Mbps (It can do 50Mbps)

An Asus RT-AC68U can do 65+ Mbps

Broadcom Routers do well with VPN's.

A lowly netgear wndr3800 can pull 15-20Mbps

_________________
My Karma ran over your Dogma
SploitWorks Custom Flashed Routers
rsatoshi
DD-WRT Novice


Joined: 02 Sep 2017
Posts: 9

PostPosted: Mon Sep 04, 2017 1:45    Post subject: Re: Update... Reply with quote
sploit wrote:
I have updated the script for UDP + Speed Tweaks.

Remember that this script is setup to default to the California server... Change it to a server near you.

Also I updated the installation of the TLS Auth Security (They now want AES-384)

PureVPN company tech support is sub par for routers.


Also... My top favorite VPN's

1) PrivateInternetAccess (they allow 128-CBC)
2) IPVanish
3) Windscribe
4) Vanished
5) Torguard

They all work and stay connected. From top to bottom in order in my opinion


Hi,

I am using the new script, but I am still getting error:

VERIFY ERROR: depth=0 error=CA signature digest algorithm too weak: C=HK ST=HK L=HongKong O=PureVPN OU=IT CN=PureVPN name=PureVPN emailAddress=mail@host.domain
OpenSSL: error:1416F086:lib(20):func(367):reason(134)
TLS_ERROR: BIO read tls_read_plaintext error
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed

I have a second router (dd-wrt for vpn)connected to a cable modem/router (now in bridge mode). Should I change something in this cable modem/router?

Currently, the internet is working fine on the second router, but openvpn is not working.

Thanks!
sploit
DD-WRT User


Joined: 16 Apr 2016
Posts: 307
Location: California

PostPosted: Mon Sep 04, 2017 2:53    Post subject: Log Reply with quote
Post the whole log, not just a piece of it
_________________
My Karma ran over your Dogma
SploitWorks Custom Flashed Routers
drewbert3370
DD-WRT Novice


Joined: 28 Aug 2017
Posts: 8

PostPosted: Mon Sep 04, 2017 9:09    Post subject: Re: Yes Reply with quote
sploit wrote:
drewbert3370 wrote:
got it all working at last, thanks for everything guys.

id rather use udp, can i just change server,port and protocol or anything else needs swapping.

ive tried but doesnt connect, just stays waiting.

i know udp works as can directly use on laptop

also the speed seems slow with tcp,i get 5mb on a 36mb connection. can this be router related, have linksys e900.

thanks again.


See above Post...

Also speeds on VPN's on routers are related to

1) Router Horsepower (CPU type and speed)
2) Distance from your house/location to the geographic server you are connecting to. The farther away, the greater the speed loss.
3) Encryption Level... 128 Bit encryption compared to 256 bit encryption is a huge difference. I recommend PrivateInternetAccess because they allow 128 Bit and you gain speeds. Nobody really needs more than that. If you do, you should deeply question yourself.

You would need a Netgear R6300v2 for about 25Mbps and a Netgear R7000 to do 40Mbps (It can do 50Mbps)

An Asus RT-AC68U can do 65+ Mbps

Broadcom Routers do well with VPN's.

A lowly netgear wndr3800 can pull 15-20Mbps


your help is amazing, thanks, if i was to join privateinternetaccess, do you have a code so you can get credited for it?

also, which would you recommend my linksys e900 with privateinternetaccess or new router with purevpn to start with?
rsatoshi
DD-WRT Novice


Joined: 02 Sep 2017
Posts: 9

PostPosted: Mon Sep 04, 2017 13:56    Post subject: Re: Log Reply with quote
sploit wrote:
Post the whole log, not just a piece of it

Hi,

Sorry. Here is the whole log:

20170904 09:51:05 W WARNING: --ping should normally be used with --ping-restart or --ping-exit
20170904 09:51:05 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20170904 09:51:05 I TCP/UDP: Preserving recently used remote address: [AF_INET]23.229.74.130:53
20170904 09:51:05 Socket Buffers: R=[172032->344064] S=[172032->344064]
20170904 09:51:05 I UDPv4 link local: (not bound)
20170904 09:51:05 I UDPv4 link remote: [AF_INET]23.229.74.130:53
20170904 09:51:05 TLS: Initial packet from [AF_INET]23.229.74.130:53 sid=f7efb5cf b21fbdca
20170904 09:51:05 N VERIFY ERROR: depth=0 error=CA signature digest algorithm too weak: C=HK ST=HK L=HongKong O=PureVPN OU=IT CN=PureVPN name=PureVPN emailAddress=mail@host.domain
20170904 09:51:05 N OpenSSL: error:1416F086:lib(20):func(367):reason(134)
20170904 09:51:05 N TLS_ERROR: BIO read tls_read_plaintext error
20170904 09:51:05 N TLS Error: TLS object -> incoming plaintext read error
20170904 09:51:05 N TLS Error: TLS handshake failed
20170904 09:51:05 I SIGUSR1[soft tls-error] received process restarting
20170904 09:51:05 Restart pause 10 second(s)
20170904 09:51:15 W WARNING: --ping should normally be used with --ping-restart or --ping-exit
20170904 09:51:15 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20170904 09:51:15 I TCP/UDP: Preserving recently used remote address: [AF_INET]23.229.74.130:53
20170904 09:51:15 Socket Buffers: R=[172032->344064] S=[172032->344064]
20170904 09:51:15 I UDPv4 link local: (not bound)
20170904 09:51:15 I UDPv4 link remote: [AF_INET]23.229.74.130:53
20170904 09:51:15 TLS: Initial packet from [AF_INET]23.229.74.130:53 sid=506983b7 65d90d01
20170904 09:51:15 N VERIFY ERROR: depth=0 error=CA signature digest algorithm too weak: C=HK ST=HK L=HongKong O=PureVPN OU=IT CN=PureVPN name=PureVPN emailAddress=mail@host.domain
20170904 09:51:15 N OpenSSL: error:1416F086:lib(20):func(367):reason(134)
20170904 09:51:15 N TLS_ERROR: BIO read tls_read_plaintext error
20170904 09:51:15 N TLS Error: TLS object -> incoming plaintext read error
20170904 09:51:15 N TLS Error: TLS handshake failed
20170904 09:51:15 I SIGUSR1[soft tls-error] received process restarting
20170904 09:51:15 Restart pause 20 second(s)
20170904 09:51:35 W WARNING: --ping should normally be used with --ping-restart or --ping-exit
20170904 09:51:35 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20170904 09:51:35 I TCP/UDP: Preserving recently used remote address: [AF_INET]23.229.74.130:53
20170904 09:51:35 Socket Buffers: R=[172032->344064] S=[172032->344064]
20170904 09:51:35 I UDPv4 link local: (not bound)
20170904 09:51:35 I UDPv4 link remote: [AF_INET]23.229.74.130:53
20170904 09:51:35 TLS: Initial packet from [AF_INET]23.229.74.130:53 sid=2a3631bc 0af6c017
20170904 09:51:35 N VERIFY ERROR: depth=0 error=CA signature digest algorithm too weak: C=HK ST=HK L=HongKong O=PureVPN OU=IT CN=PureVPN name=PureVPN emailAddress=mail@host.domain
20170904 09:51:35 N OpenSSL: error:1416F086:lib(20):func(367):reason(134)
20170904 09:51:35 N TLS_ERROR: BIO read tls_read_plaintext error
20170904 09:51:35 N TLS Error: TLS object -> incoming plaintext read error
20170904 09:51:35 N TLS Error: TLS handshake failed
20170904 09:51:35 I SIGUSR1[soft tls-error] received process restarting
20170904 09:51:35 Restart pause 40 second(s)
20170904 09:52:15 W WARNING: --ping should normally be used with --ping-restart or --ping-exit
20170904 09:52:15 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20170904 09:52:15 I TCP/UDP: Preserving recently used remote address: [AF_INET]23.229.74.130:53
20170904 09:52:15 Socket Buffers: R=[172032->344064] S=[172032->344064]
20170904 09:52:15 I UDPv4 link local: (not bound)
20170904 09:52:15 I UDPv4 link remote: [AF_INET]23.229.74.130:53
20170904 09:52:15 TLS: Initial packet from [AF_INET]23.229.74.130:53 sid=d99f8227 1eacbf08
20170904 09:52:15 N VERIFY ERROR: depth=0 error=CA signature digest algorithm too weak: C=HK ST=HK L=HongKong O=PureVPN OU=IT CN=PureVPN name=PureVPN emailAddress=mail@host.domain
20170904 09:52:15 N OpenSSL: error:1416F086:lib(20):func(367):reason(134)
20170904 09:52:15 N TLS_ERROR: BIO read tls_read_plaintext error
20170904 09:52:15 N TLS Error: TLS object -> incoming plaintext read error
20170904 09:52:15 N TLS Error: TLS handshake failed
20170904 09:52:15 I SIGUSR1[soft tls-error] received process restarting
20170904 09:52:15 Restart pause 80 second(s)
20170904 09:53:09 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20170904 09:53:09 D MANAGEMENT: CMD 'state'
20170904 09:53:09 MANAGEMENT: Client disconnected
20170904 09:53:09 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20170904 09:53:09 D MANAGEMENT: CMD 'state'
20170904 09:53:09 MANAGEMENT: Client disconnected
20170904 09:53:09 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20170904 09:53:09 D MANAGEMENT: CMD 'state'
20170904 09:53:09 MANAGEMENT: Client disconnected
20170904 09:53:09 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20170904 09:53:09 D MANAGEMENT: CMD 'status 2'
20170904 09:53:09 MANAGEMENT: Client disconnected
20170904 09:53:09 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20170904 09:53:09 D MANAGEMENT: CMD 'log 500'
Goto page Previous  1, 2, 3, 4, 5 ... 9, 10, 11  Next Display posts from previous:    Page 4 of 11
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum