# Specify that we are a client and that we will be pulling certain # config file directives from the server. client # On most systems, the VPN will not function unless you partially or # fully disable the firewall for the TUN/TAP interface. dev tun # Windows needs the TAP-Win32 adapter name from the Network # Connections panel if you have more than one. On XP SP2, you may # need to disable the firewall for the TAP adapter. ;dev-node MyTap proto udp # The hostname/IP and port of the server. # It's better if you use an IP address here, in case the tunnel gets # forcefully closed and this hostname is set to be resolved from a # nameserver on the other side of the tunnel. remote clink.acm.uiuc.edu 1194 # Keep trying indefinitely to resolve the host name of the OpenVPN # server. Very useful on machines which are not permanently connected # to the internet such as laptops. resolv-retry infinite # Most clients don't need to bind to a specific local port number. nobind # Try to preserve some state across restarts. persist-key persist-tun # If you are connecting through an HTTP proxy to reach the actual # OpenVPN server, put the proxy server/IP and port number here. See # the man page if your proxy server requires authentication. ;http-proxy-retry # retry on connection failures ;http-proxy [proxy server] [proxy port #] # Wireless networks often produce a lot of duplicate packets. Set # this flag to silence duplicate packet warnings. ;mute-replay-warnings # SSL/TLS parms. cd .openvpn ca acm-ca.crt cert acm-client.crt key acm-client.key auth-user-pass up "./acm-client.py up" down "./acm-client.py down" # Verify server certificate by checking that the certicate has the # nsCertType field set to "server". This is an important precaution # to protect against a potential attack discussed here: # http://openvpn.net/howto.html#mitm ns-cert-type server # Select a cryptographic cipher. cipher BF-CBC # Enable compression on the VPN link. comp-lzo # Set log file verbosity. verb 3 # Silence repeating messages mute 20