Suggestion: Double VPN with SSH-tunnel

[kgc 0]

Now you recommend create SSH tunnel with this script:

Quote

chmod 600 sshtunnel.key
while :
do
echo ""; echo "AirVPN SSH Tunnel"
ssh -i sshtunnel.key -L 1412:127.0.0.1:2019 sshtunnel@100.100.100.100 -p 22 -N -T -v
read -t 5 -p "Retry? (or wait 5 sec for Y)" yn
if [[ $yn == "n" || $yn == "N" ]]; then break; fi
done

where 100.100.100.100 - IP-address of your server.

Then customer need launch openvpn with config with these lines:

Quote

remote 127.0.0.1 1412
route 100.100.100.100 255.255.255.255 net_gateway

I tried create SSH tunnel with other script:

Quote

chmod 600 sshtunnel.key
while :
do
echo ""; echo "AirVPN SSH Tunnel"
ssh -i sshtunnel.key -L 1412:200.200.200.200:2019 sshtunnel@100.100.100.100 -p 22 -N -T -v
read -t 5 -p "Retry? (or wait 5 sec for Y)" yn
if [[ $yn == "n" || $yn == "N" ]]; then break; fi
done

where 200.200.200.200 - IP-address of other your server.

And then launch openvpn with the same config:

Quote

remote 127.0.0.1 1412
route 100.100.100.100 255.255.255.255 net_gateway

But tun0 is not created.

Log of ssh contains this line:

Quote

channel 2: open failed: administratively prohibited: open failed

Also I tried change port from 2019 to 2018 with the same result.
(2019 is port for OpenVPN inside SSH, 2018 is port for clear OpenVPN).

I think you do not allow such connections.
If you will allow such connections customers will create double VPN like that:
Customer <------------------------> 100.100.100.100 <------------------------> 200.200.200.200 <------------------------> Internet
                     SSH+OpenVPN                                       OpenVPN Edited ... by kgc