VPN Manager for OpenVPN

    IPlayer monitor and log the IP addresses of all clients who access their service. This quickly allows them to spot multiple clients on the same IP address (VPN gateway) and create a blacklist of VPN IP addresses. A new VPN gateway might work for a few hours before they spot and block it.
    This applies to just about any pay for view service. VPN's are now useless for bypassing geo-blocking.

    Shoog

    Quote from scriptkiddie

    when I start EmulationStation OpenVPN stops.

    I have Transmission installed as well and it keeps running even after starting ES.

    Any idea how to persist OpenVPN after running ES?

    The addon manages VPN connections from within Kodi. When you quit you’re not in Kodi any more and the connection goes away (by design). Outside of Kodi you can manage VPN connections however you would for your base operating system anyway

    I have also Problems with CG

    2020-05-16 16:50:15.083 T:1665287040 NOTICE: VPN Mgr : (vpnplatform.py) VPN log file start >>>

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: file '/storage/.kodi/userdata/addon_data/service.vpn.manager/CyberGhost/user.key' is group or others accessible

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: file '/storage/.kodi/addons/service.vpn.manager/CyberGhost/pass.txt' is group or others accessible

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 OpenVPN 2.4.7 armv7ve-libreelec-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD] built on Mar 3 2020

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]178.162.210.183:443

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 UDP link local: (not bound)

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 UDP link remote: [AF_INET]178.162.210.183:443

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1573', remote='link-mtu 1549'

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: 'mtu-dynamic' is present in local config but missing in remote config, local='mtu-dynamic'

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-128-GCM'

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth [null-digest]'

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:09 2020 [frankfurt-rack405.nodes.gen4.ninja] Peer Connection Initiated with [AF_INET]178.162.210.183:443

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:11 2020 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:11 2020 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/3

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:11 2020 TUN/TAP device tun0 opened

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:11 2020 /sbin/ip link set dev tun0 up mtu 1500

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:11 2020 /sbin/ip addr add dev tun0 10.203.11.113/24 broadcast 10.203.11.255

    2020-05-16 16:50:15.084 T:1665287040 NOTICE: Sat May 16 16:49:17 2020 WARNING: OpenVPN was configured to add an IPv6 route over tun0. However, no IPv6 has been configured for this interface, therefore the route installation may fail or may not work as expected.

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:49:17 2020 Initialization Sequence Completed

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:49:20 2020 FRAG_IN error flags=0x2a187bf3: FRAG_TEST not implemented

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:49:31 2020 FRAG_IN error flags=0x2a187bf3: FRAG_TEST not implemented

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:49:42 2020 FRAG_IN error flags=0x2a187bf3: FRAG_TEST not implemented

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:49:53 2020 FRAG_IN error flags=0x2a187bf3: FRAG_TEST not implemented

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:50:04 2020 FRAG_IN error flags=0x2a187bf3: FRAG_TEST not implemented

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:50:11 2020 [frankfurt-rack405.nodes.gen4.ninja] Inactivity timeout (--ping-restart), restarting

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:50:11 2020 /sbin/ip addr del dev tun0 10.203.11.113/24

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: Sat May 16 16:50:11 2020 SIGTERM[soft,ping-restart] received, process exiting

    2020-05-16 16:50:15.085 T:1665287040 NOTICE: VPN Mgr : (vpnplatform.py) <<< VPN log file end

    2020-05-16 16:50:15.886 T:1665287040 NOTICE: VPN Mgr : (service.py) Disconnected from VPN

    2020-05-16 16:50:19.081 T:1591370624 NOTICE: VPN Mgr : (common.py) Received connection info from ipinfo.io, IP 37.201.228.194 location North Rhine-Westphalia, DE, ISP AS6830 Liberty Global B.V.

    2020-05-16 16:50:25.581 T:1665287040 NOTICE: VPN Mgr : (service.py) VPN connected to Germany (UDP)

    2020-05-16 16:51:05.822 T:1427780480 NOTICE: VPN Mgr : (common.py) Creating VPN provider directory /storage/.kodi/addons/service.vpn.manager/CyberGhost

    2020-05-16 16:51:56.592 T:1427780480 ERROR: VPN Mgr : (ipinfo.py) Couldn't connect to IP provider ipinfo.io

    2020-05-16 16:51:56.593 T:1427780480 ERROR: VPN Mgr : (ipinfo.py) API call was http://ipinfo.io/json

    2020-05-16 16:51:56.593 T:1427780480 ERROR: VPN Mgr : (ipinfo.py) Response was <class 'urllib2.URLError'> <urlopen error timed out>

    2020-05-16 16:51:56.820 T:1427780480 ERROR: VPN Mgr : (common.py) Didn't get a good response from ipinfo.io

    2020-05-16 16:52:20.602 T:1427780480 NOTICE: VPN Mgr : (common.py) Received connection info from ipinfo.io, IP 37.201.228.194 location North Rhine-Westphalia, DE, ISP AS6830 Liberty Global B.V.

    2020-05-16 16:52:21.104 T:1427780480 NOTICE: VPN Mgr : (common.py) Connected to a VPN

    Profile is Switzerland (UDP)

    Using 37.201.228.194, located in North Rhine-Westphalia, DE

    Service Provider is AS6830 Liberty Global B.V.

    2020-05-16 16:52:27.464 T:1665287040 NOTICE: VPN Mgr : (service.py) Updating systemd, connect before boot is false, location is

    2020-05-16 16:52:27.497 T:1665287040 NOTICE: VPN Mgr : (vpnplatform.py) Disabling systemd service with systemctl disable openvpn.service

    2020-05-16 16:53:43.991 T:1906258816 NOTICE: CAESinkPi:AddPackets Underrun (delay:0.00 frames:2205)

    2020-05-16 16:53:45.873 T:1937068048 ERROR: Keymapping error: no such action '-' defined

    2020-05-16 16:53:51.914 T:1419387776 ERROR: GetDirectory - Error getting plugin://service.vpn.manager/?list

    2020-05-16 16:53:52.877 T:1937068048 ERROR: CGUIMediaWindow::GetDirectory(plugin://service.vpn.manager/?list) failed

    Complain to Cyberghost, they’ve been submitting fixes for their service recently, so you should at least check you’re using the latest files.

    To me this looks like it’s connecting but taking too long to become active/resolve the DNS. They can determine why this is and what to do about it. Other providers don’t have this issue.

    Quote from zomboided

    Complain to Cyberghost, they’ve been submitting fixes for their service recently, so you should at least check you’re using the latest files.

    To me this looks like it’s connecting but taking too long to become active/resolve the DNS. They can determine why this is and what to do about it. Other providers don’t have this issue.

    I can confirm that with CG TCP connection finally works. TCP & UDP not, UDP also not.

    I've downloaded new configuration files from CG website, TCP connection and premium servers G4. Transferred to the Pi the client.key and client.crt. Followed the assistant and put the connection to TCP. Now I have incoming traffic from the tunnel, before 0 bytes.

    My openvpn won't let me connect to pia anymore. Has anything changed in the last week? It suddenly stopped working and now I get this error when I try and reconnect

    Uninstalling everything and starting again seems to have fixed it

    Edited 2 times, last by Sausageman (May 28, 2020 at 7:57 PM).

    Hi,

    Thanks for your easy-to-use add-on!

    I have set it up using a paid Cyberghost VPN. However I'm facing an issue. Libreelec is installed on a Raspberry Pi. It hosts, among other stuff, Docker and a Nextcloud instance (+ letsencrypt with duckdns). When I connect the VPN, then I cannot access Nextcloud from outside my network. I do not have any error message, it just tries to loads the page indefinitely...

    Is there a way to understand where the issue comes from and, finally, to solve it?

    Thanks

    Connect to the vpn, do a ps -ef and check to see that openvpn is running and then ping something you know is working.


    If it doesn’t work then my money is on dns not working...you could try pinging an IP address directly if this is the case to check that it has connectivity.


    If outbound traffic is fine and it’s just inbound traffic then it depends on how your network and devices are set up. I can ssh into my home network and forward to a box that’s externally connected to a VPN, no problems. Can’t help here.

    Just tried it. When I do ps -ef, I have:

    Quote

    25197 root 0:00 openvpn /storage/.kodi/addons/service.vpn.manager/CyberGhost/United States (UDP).ovpn

    Then ping works perfectly. But I still can't SSH into Libreelec from outside ("Timeout connecting to xxx.duckdns.org").

    My Pi is connected to my router (ISP box), on which port forwarding is setup so as I can access my home network via my duckdns address. That's pretty simple, ports 22 and 443 are redirected to the Pi.

    When the VPN is activated, should I still be able to connect via my duckdns address? Or should I use the VPN address?

    Thanks again.

    On my windows machine, I was able to point the wizard to my self-signed .ovpn to successfully connect to my media server. On my mecool though, I am only given a choice of two defunct webDAV shares for loading the .ovpn file. Local smb share and internal storage wasn't available for some reason.

    Quote from Alomon

    Just tried it. When I do ps -ef, I have:

    Then ping works perfectly. But I still can't SSH into Libreelec from outside ("Timeout connecting to xxx.duckdns.org").

    My Pi is connected to my router (ISP box), on which port forwarding is setup so as I can access my home network via my duckdns address. That's pretty simple, ports 22 and 443 are redirected to the Pi.

    When the VPN is activated, should I still be able to connect via my duckdns address? Or should I use the VPN address?

    Thanks again.

    duckdns address. Local traffic shouldn’t be going through the VPN. It should come into the router (which isn’t using the VPN) and be forwarded over your local network to your Pi. It’s exactly how I run mine, albeit with a different dynamic DNS service

    I'm trying to run openvpn with surfshark vpn. I believe I'm having a dns issue. What would be the best solution to get it working properly. Ive tried the included scripts. I can give you login details to help fix this problem if that's any use. Ive see on the wiki there other scripts to fix this problem but don't know where to start with them. Any help would be great. These are the scripts I'm on about. up.sh and down.sh scripts for LibreElec - DNS Leakage · Issue #282 · Zomboided/service.vpn.manager · GitHub Any help to what I need to change and where would fantastic.

    Quote from zomboided

    duckdns address. Local traffic shouldn’t be going through the VPN. It should come into the router (which isn’t using the VPN) and be forwarded over your local network to your Pi. It’s exactly how I run mine, albeit with a different dynamic DNS service

    That's what I understand. And I have no problem connecting to Libreelec from my local network when the VPN is activated. The problem occurs only when trying to connect to Librelec from outside. I can only reach my router, but not my Raspberry hosting Librelec. Port forwarding should'nt be an issue as everything work fine when VPN is deactivated, am I right? I'm running out of ideas, it seems pretty simple but doesn't work, should I try a different VPN service provider?

    Thanks

    Quote from Alomon

    That's what I understand. And I have no problem connecting to Libreelec from my local network when the VPN is activated. The problem occurs only when trying to connect to Librelec from outside. I can only reach my router, but not my Raspberry hosting Librelec. Port forwarding should'nt be an issue as everything work fine when VPN is deactivated, am I right? I'm running out of ideas, it seems pretty simple but doesn't work, should I try a different VPN service provider?

    Thanks

    How do you try to connect from outside? I even don't have a clue to do that, tanks! I just want to be able to connect from my phone to see photos and documents from an HDD connected to the Rpi, when i'm outside home.