20194 0 Posted ... Hi. I'm having a little trouble with this. Running Ubuntu Server, I want to setup UFW rules to only connect through the VPN. I started with these: sudo ufw default deny outgoing sudo ufw default deny incoming sudo ufw allow out on tun0 from any to any sudo ufw allow in on tun0 from any to any Now I want to allow the IP address of the VPN Server. like this: sudo ufw allow out from any to IP Problem is I have no idea what IP address to use when I want to connect to Xuange in Zurich? Where can I find it? Quote Share this post Link to post
OpenSourcerer 1435 Posted ... As per FAQ: $ dig +short a in xuange.airservers.org . Quote Hide OpenSourcerer's signature Hide all signatures NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT. LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too! Want to contact me directly? All relevant methods are on my About me page. Share this post Link to post
20194 0 Posted ... 47 minutes ago, OpenSourcerer said: As per FAQ: $ dig +short a in xuange.airservers.org . sudo ufw allow out from any to 79.142.69.159 Tried this doesn't work. Here are all my UFW rules, does something look wrong? To Action From -- ------ ---- 22/tcp ALLOW Anywhere Anywhere on tun0 ALLOW Anywhere 22/tcp (v6) ALLOW Anywhere (v6) Anywhere (v6) on tun0 ALLOW Anywhere (v6) 79.142.69.159 ALLOW OUT Anywhere Anywhere ALLOW OUT Anywhere on tun0 Anywhere (v6) ALLOW OUT Anywhere (v6) on tun0 Quote Share this post Link to post
Staff 9972 Posted ... @20194 Hello! Each VPN server has 4 entry-IP address. There are no domain names to obtain entry-IP addresses 2, 3 and 4 of a specific server, but only for countries or continents or all servers. You may consider to use the Configuration Generator or the API to get Xuange''s addresses only. For your comfort they are (v4 and v6, from 1 to 4): 79.142.69.159 2a00:7145:c1:1:d166:dd1b:2fa3:dbdb 79.142.69.161 2a00:7145:c1:1:6726:4916:97c9:c979 79.142.69.162 2a00:7145:c1:1:6838:aa89:d61c:fb42 79.142.69.163 2a00:7145:c1:1:c862:16de:4698:4c9d Kind regards Quote Share this post Link to post
20194 0 Posted ... 17 minutes ago, Staff said: @20194 Hello! Each VPN server has 4 entry-IP address. There are no domain names to obtain entry-IP addresses 2, 3 and 4 of a specific server, but only for countries or continents or all servers. You may consider to use the Configuration Generator or the API to get Xuange''s addresses only. For your comfort they are (v4 and v6, from 1 to 4): 79.142.69.159 2a00:7145:c1:1:d166:dd1b:2fa3:dbdb 79.142.69.161 2a00:7145:c1:1:6726:4916:97c9:c979 79.142.69.162 2a00:7145:c1:1:6838:aa89:d61c:fb42 79.142.69.163 2a00:7145:c1:1:c862:16de:4698:4c9d Kind regards Thanks for the reply. After allowing these IPs in UFW, it still didn't work. I decided to try to use wireguard directly instead of eddie-cli. To my surprise it now works. Does eddie-cli need any other IP adresses allowed through UFW? Anyhow I'm going to keep using wireguard. It works much better than eddie-cli anyways. Quote Share this post Link to post
Staff 9972 Posted ... @20194 Hello! Yes, Eddie needs to access the "bootstrap" servers too. Anyway you can stick to WireGuard, as you say. Kind regards Quote Share this post Link to post