Страница 1 из 1

freebsd jail openvpn client

Добавлено: 2016-07-20 19:12:19
bagas
Вечер добрый.
Подскажите пожалуйста, как мне на системе FreeBSD в jail запустить openvpn client.
Как я понимаю не может создаться маршрут и подняться tun интерфейс, но как это сделать в jail окружении?

Код: Выделить всё

Jul 20 14:55:29 _mssql openvpn[88975]: OpenVPN 2.3.11 amd64-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Jul 20 2016
Jul 20 14:55:29 _mssql openvpn[88975]: library versions: OpenSSL 1.0.1p-freebsd 9 Jul 2015, LZO 2.09
Jul 20 14:56:18 _mssql openvpn[89045]: WARNING: file '/etc/VPN/ta.key' is group or others accessible
Jul 20 14:56:18 _mssql openvpn[89045]: Control Channel Authentication: using '/etc/VPN/ta.key' as a OpenVPN static key file
Jul 20 14:56:18 _mssql openvpn[89045]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 14:56:18 _mssql openvpn[89045]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 14:56:18 _mssql openvpn[89045]: Socket Buffers: R=[41600->41600] S=[9216->9216]
Jul 20 14:56:18 _mssql openvpn[89045]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Jul 20 14:56:18 _mssql openvpn[89045]: UDPv4 link local: [undef]
Jul 20 14:56:18 _mssql openvpn[89045]: UDPv4 link remote: [AF_INET]xxx.xxx.x.xxx:1194
Jul 20 14:56:18 _mssql openvpn[89045]: TLS: Initial packet from [AF_INET]xxx.xxx.x.xxx:1194, sid=6a23c502 9bdcc7f7
Jul 20 14:56:18 _mssql openvpn[89045]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jul 20 14:56:19 _mssql openvpn[89045]: VERIFY OK: depth=1, C=RU, ST=MSK, L=Moskov, O=tro, OU=IT, CN=tro CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Jul 20 14:56:19 _mssql openvpn[89045]: Validating certificate key usage
Jul 20 14:56:19 _mssql openvpn[89045]: ++ Certificate has key usage  00a0, expects 00a0
Jul 20 14:56:19 _mssql openvpn[89045]: VERIFY KU OK
Jul 20 14:56:19 _mssql openvpn[89045]: Validating certificate extended key usage
Jul 20 14:56:19 _mssql openvpn[89045]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Jul 20 14:56:19 _mssql openvpn[89045]: VERIFY EKU OK
Jul 20 14:56:19 _mssql openvpn[89045]: VERIFY OK: depth=0, C=RU, ST=MSK, L=Moskov, O=tro, OU=IT, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Jul 20 14:56:19 _mssql openvpn[89045]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jul 20 14:56:19 _mssql openvpn[89045]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 14:56:19 _mssql openvpn[89045]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jul 20 14:56:19 _mssql openvpn[89045]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 14:56:19 _mssql openvpn[89045]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 20 14:56:19 _mssql openvpn[89045]: [server] Peer Connection Initiated with [AF_INET]xxx.xxx.x.xxx:1194
Jul 20 14:56:21 _mssql openvpn[89045]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Jul 20 14:56:21 _mssql openvpn[89045]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.248.0,route 10.10.4.0 255.255.255.0,dhcp-option DNS 192.168.0.3,dhcp-option DNS 192.168.0.250,route 10.10.5.1,topology net30,ping 10,ping-restart 120,route 192.168.0.127 255.255.255.255,route 192.168.0.126 255.255.255.255,route 192.168.0.109 255.255.255.255,ifconfig 10.10.6.69 10.10.6.70'
Jul 20 14:56:21 _mssql openvpn[89045]: OPTIONS IMPORT: timers and/or timeouts modified
Jul 20 14:56:21 _mssql openvpn[89045]: OPTIONS IMPORT: --ifconfig/up options modified
Jul 20 14:56:21 _mssql openvpn[89045]: OPTIONS IMPORT: route options modified
Jul 20 14:56:21 _mssql openvpn[89045]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Jul 20 14:56:21 _mssql openvpn[89045]: Could not retrieve default gateway from route socket:: No such process (errno=3)
Jul 20 14:56:21 _mssql openvpn[89045]: ROUTE: default_gateway=UNDEF
Jul 20 14:56:21 _mssql openvpn[89045]: Cannot allocate TUN/TAP dev dynamically
Jul 20 14:56:21 _mssql openvpn[89045]: Exiting due to fatal error

freebsd jail openvpn client

Добавлено: 2016-08-09 7:20:11
Alex Keda
Никак....
В джайле такие устройства создать нельзя, как и маршрут добавить

Хотя про маршрут не уверен....