Secure VPN scripts
Script used to establish a secure VPN connection and block all traffic not going via the VPN. You can define some ports that will bypass the VPN (SSH, etc).
You can also add multiple VPN servers, so when the script cannot connect to one server, it will try the next one.
The script allow you to speedtest all VPN servers listed in config to find the fastest ones. It will then reorder your servers' config file accordingly.
Clone this repository where you want the script to live :
git clone git://github.com/leeroybrun/secure-vpn.git
Then you need to call the installer to copy all config files inside
sudo ./install config
You can now customize the config files inside
servers.conf and place your VPN servers' certificates inside
If your server need custom OpenVPN settings, you can edit the
When all settings are ready, you can make the script start every time your network goes up :
sudo ./install persist
When the script is correctly installed, you can either call it directly, or reboot your computer to start it automatically.
If you call it manually, here are the available commands :
sudo ./secure-vpn.sh start: start the VPN and apply iptables rules
sudo ./secure-vpn.sh stop: stop the VPN, but leave iptables rules in place
sudo ./secure-vpn.sh flush-iptables: flush iptables rules
sudo ./secure-vpn.sh speedtest: connect to each VPN servers defined in config & run a speedtest. It will then output the 10 best servers and reorder your servers.conf file to put the bests on top.
VPN_PROTO="udp" OPEN_PORTS="xxxx xxxx xxxx" SERVER_IP="xxx.xxx.xxx.xxx" LOCAL_NETWORK="xxx.xxx.xxx.xxx/24" WAN_INTERFACE="ethX" WAN_GATEWAY="xxx.xxx.xxx.xxx" SPEEDTEST_CLI="speedtest-cli"
- knock knock for ports opening
- auto detect local network, gateway & IP