Как использовать openvpn для просмотра

Instead of using OpenVPN, use SSH tunneling. This works better and is much easier to setup ans is also encrypted. One additional bonus is that unlike OpenVPN, if the connection is closed, you will no longer be able to browse the internet. With OpenVPN, if the connection is closed you will automatically be put back on your own network and be allowed to continue browsing without warning. Nothing needs to be changed on your server.

If you run Windows on your computer:

1. Download PuTTY (if you don't have it already)
2. In the Category side panel, go Connection>SSH and check Enable Compression
3. In the Category side panel, go Connection>SSH>Tunnels and enter a number in the source port field. I typically use 3456. Then select Dynamic and finally click Add.
4. In the Category side panel, go back to Session. Enter your username@hostname (replacing your_username with your username on the system and hostname with the domain or IP address of your server) in the hostname field and then save the session.
5. Click Open and then enter your password.
6. Download Firefox if you don't already have it.
7. In Firefox, go Firefox>Options and then Advanced>Network>Settings.
8. Select Manual proxy configuration and then delete everything in all of the editable boxes.
9. Enter localhost as the SOCKS Host and enter 3456 (or whatever port you used in step 3) as the Port.
10. Click Ok for both open Firefox configuration windows.
11. Enter about:config in Firefox's location bar and press enter. Tell Firefox that you will be careful.
12. Search for network.proxy.socks_remote_dns and double click on it to set it to true.

If you run Linux or Mac OS on your home computer:

1. Open a terminal and type ssh -CD:3456 your_username@hostname (replacing your_username with your username on the system and hostname with the domain or IP address of your server) and press enter.
2. Download Firefox if you don't already have it.
3. In Firefox, go Edit>Preferences and then Advanced>Network>Settings.
4. Select Manual proxy configuration and then delete everything in all of the editable boxes.
5. Enter localhost as the SOCKS Host and enter 3456 (or whatever port you used in step 3) as the Port.
6. Click Ok for both open Firefox configuration windows.
7. Enter about:config in Firefox's location bar and press enter. Tell Firefox that you will be careful.
8. Search for network.proxy.socks_remote_dns and double click on it to set it to true.

When you are done, close PuTTY or the terminal and set Firefox to use No proxy instead of the manual one you configured. Next time you want to connect, just run your saved PuTTY session or run the command line command and set Firefox to use the Manual proxy configuration option. Firefox will remember your proxy settings.

(Note that where I have given examples they are minimal, and you need to satisfy yourself you understand how they work and flesh them out our you could lock yourself out your box. Also, these instructions are not permanant - so you can at least reboot to make the problem go away if you do something stupid.) I'm not convinced that a proxy of this nature is a good idea as an always-on solution because of complexity, reduced speed and curveball problems it will throw at you.

You don't need to configure a proxy. What you do need to ensure is that your OpenVPN server provides a default route (and with a lower metric so its preferred) via the OpenVPN server.

push "redirect-gateway XXXX def1" 

You will probably also need tell the OpenVPN server to NAT the connection so that it will share the IP address of the server - as 10.x.x.x is not globally routed. You can do this by adding the command (on the server)

iptables -t NAT -A POSTROUTING -o ethX -j MASQUERADE 

If you want to ensure you connect via OpenVPN you would want to put a firewall on your VPN client preventing traffic going out via the normal interface (except traffic to the OpenVPN server).

iptables -I INPUT -j DROP iptables -I INPUT -s SERVER.IP -j ACCEPT