Portal Home > Knowledgebase > Articles Database > How to test if *all* internet activity is going through VPN?
How to test if *all* internet activity is going through VPN?
| Posted by mrzippy, 10-07-2010, 04:10 PM |
| Hello,
I was wondering if someone can help me out with this. We have an installation of openVPN AS setup, and it is configured (we think) to route all the client's internet activity through the openVPN server.
How can we verify this?
Is there some kind of test we can run on a connected client computer to make sure?
All we have done so far is go to whatismyip.com and confirm it is the openVPN server's IP displayed... but how can we make particular that *all* activity is being routed correctly?
(ie: DNS lookups, IM chat, skype, etc...)
Thanks!
|
| Posted by elicitservers, 10-07-2010, 04:17 PM |
| You need to have this in the VPN server's config:
Then if you want DNS queries to go through VPN as well:
Where xx.xx.xx.xx is the IP to forward DNS requests to.
To test it I'm not so sure, as long as it's going through the gateway listed above, the traffic should all flow through the VPN, quite sure regardless of the port number of a specific application.
|
| Posted by mrzippy, 10-07-2010, 04:42 PM |
| We're using the paid "AS" version, so this is all set in the admin GUI side of things. (No manual editing of config files needed.)
I can confirm that the settings you mentioned are present, but what I'm trying to do now is actually verify 100%they are working as expected.
In other words, according to the setup/configuration.. it should be routing all traffic through the openVPN server. But how do I actually test to confirm (for example) that DNS querie are actually going through the server?
Thanks!
|
| Posted by Atlas Global, 10-07-2010, 09:47 PM |
| http://www.wireshark.org/
Set up WireShark on a PC with 2 nics.
Connect network or computer being analyzed to nic-1 and your internet connection to nic-2
Run WireShark and analyze the packets... you'll quickly know if it's all encrypted.
|
| Posted by YUPAPA, 10-07-2010, 09:58 PM |
| I assume this is setup on linux server? You can just use iptraf and watch traffic on the client tun/tap devices on the server.
|
| Posted by eth00, 10-08-2010, 10:24 AM |
| Yeah but that won't show you for sure everything is being sent through the VPN.
What about just setting up some firewall rules to make sure it only goes through the VPN? Or even routing table could be used, make everything not in the destination range route nowhere.
|
Add to Favourites 
Print this Article
Also Read
VPS Hardening (Views: 671)
Shared Hosting
Shared Hosting
