0

This is the first time I try vpn over tor on debian 10. I want to set it up so that things connect as followed:

application -> obfs4proxy -> middle node -> exit node -> protonvpn -> internet


My torrc:

RunAsDaemon 1
ControlPort 9051
HashedControlPassword [...MY_HASHED_PASSWORD...]
CookieAuthentication 1

UseBridges 1
ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed
Bridge obfs4 [...MY_BRIDGE_1_DETAILS...]
Bridge obfs4 [...MY_BRIDGE_2_DETAILS...]
Bridge obfs4 [...MY_BRIDGE_3_DETAILS...]

SocksPort 127.0.0.1:9050 IsolateDestAddr IsolateDestPort
SocksPort 127.0.0.1:9053 PreferSOCKSNoAuth

My vot.ovpn:

# ==============================================================================
# Copyright (c) 2016-2017 ProtonVPN A.G. (Switzerland)
# Email: contact@protonvpn.com
#
# The MIT License (MIT)
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
# copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all
# copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
# ==============================================================================

client
dev tun
proto tcp

remote us-free-01.protonvpn.com 443
remote us-free-01.protonvpn.com 5995
remote us-free-01.protonvpn.com 8443

remote-random
resolv-retry infinite
nobind
cipher AES-256-CBC
auth SHA512
comp-lzo no
verb 3

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun

reneg-sec 0

remote-cert-tls server
auth-user-pass
pull
fast-io

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

<ca>
[...MY_CERTIFICATE...]
</ca>

key-direction 1
<tls-auth>
# 2048 bit OpenVPN static key
[...MY_OPENVPN_STATIC_KEY...]
</tls-auth>

socks-proxy 127.0.0.1 9053

When I run sudo openvpn vot.ovpn, it gives me the following error:

[...SKIPPED...]
[...TIME...] Initialization Sequence Completed
[...TIME...] [us-tx-107.protonvpn.com] Inactivity timeout (--ping-restart), restarting
[...TIME...] SIGUSR1[soft,ping-restart] received, process restarting
[...TIME...] Restart pause, 5 second(s)
[...TIME...] NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
[...TIME...] NOTE: --fast-io is disabled since we are not using UDP
[...TIME...] TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:9053
[...TIME...] Socket Buffers: R=[87380->425984] S=[16384->425984]
[...TIME...] Attempting to establish TCP connection with [AF_INET]127.0.0.1:9053 [nonblock]
[...TIME...] TCP connection established with [AF_INET]127.0.0.1:9053
[...TIME...] recv_socks_reply: TCP port read timeout expired: Operation now in progress (errno=115)
[...TIME...] SIGUSR1[soft,init_instance] received, process restarting
[...TIME...] Restart pause, 5 second(s)
[...TIME...] NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
[...TIME...] NOTE: --fast-io is disabled since we are not using UDP
[...TIME...] TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:9053
[...TIME...] Socket Buffers: R=[87380->425984] S=[16384->425984]
[...TIME...] Attempting to establish TCP connection with [AF_INET]127.0.0.1:9053 [nonblock]
[...TIME...] TCP connection established with [AF_INET]127.0.0.1:9053
[...TIME...] recv_socks_reply: TCP port read timeout expired: Operation now in progress (errno=115)
[...TIME...] SIGUSR1[soft,init_instance] received, process restarting
[...TIME...] Restart pause, 5 second(s)
[...TIME...] NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
[...TIME...] NOTE: --fast-io is disabled since we are not using UDP
[...TIME...] TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:9053
[...TIME...] Socket Buffers: R=[87380->425984] S=[16384->425984]
[...TIME...] Attempting to establish TCP connection with [AF_INET]127.0.0.1:9053 [nonblock]
[...TIME...] TCP connection established with [AF_INET]127.0.0.1:9053
[...TIME...] recv_socks_reply: TCP port read timeout expired: Operation now in progress (errno=115)
[...TIME...] SIGUSR1[soft,init_instance] received, process restarting
[...TIME...] Restart pause, 5 second(s)
[...ABOVE_LINES_REPEATT_UNTIL_PROCESS_DIE...]

What's wrong?

torsocks -P 9053 curl https://ifconfig.me successfully outputs the ip address of the exit node.

If I remove socks-proxy 127.0.0.1 9053 from vot.ovpn, then running sudo openvpn vot.ovpn successfully establish a vpn connection, i.e. curl https://ifconfig.me outputs the ip address of the vpn exit.

Somehow they works as individual components but not when combined!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.