T
T
taurus902014-10-19 00:45:07
VPN
taurus90, 2014-10-19 00:45:07

OpenVPN doesn't encrypt traffic? Hello toolbar.beeline.ru?

Today I went online through my OpenVPN server, I myself am using WIndows 8.1. Encryption - Triple DES. But my right eye started to twitch when 10 minutes ago, while visiting one resource, I saw my browser (Opera) accessing... toolbar.beeline.ru.....
How is this possible? I already managed to google and find people's indignation about a certain toolbar from the beeline, which often interferes. I understand that this is some embedding of HTML / JS code into HTTP frames, once I saw it, and clicked "disable forever" - I didn’t see it anymore, but I watched the browser constantly refer to toolbar.beeline.ru ...
I can't figure out why I saw this while working through OpenVPN. The server of my network is a large respected hosting, it has nothing to do with the beeline.
Having now opened the source of an arbitrary page, Ctrl + U, I did not find anything related to a certain toolbar ...
If someone can explain in detail why my traffic can not be encrypted while inside the OpenVPN network (as a condition that there would be something beeline in it - or added), or I do not understand something in this?
Ubuntu server, openvpn in the most basic configuration (used typical deployment instructions scattered around the net)
Thanks!!
UPDATE
After some more work, I found this ugly boy. (only skips on some pages)

<!-- [start] toolbar body -->
<script name="ets-anchor" type="text/javascript" src="http://toolbar.beeline.ru/ets/scripts/Anchor.js"></script>
<!-- [end] toolbar -->

So why is this happening with OpenVPN? How to get rid of the fact that my traffic is still available to the provider??
Of course, I don’t even doubt that if I look at the traffic of my real Internet connection via WireShark, everything there will be clear and readable for the sniffer, as well as for the operator. Why is that?
OpenVPN client config: pastebin.com/q6Pb8684 (upd: removed pull at the end, don't see the point)
OpenVPN server config (ubuntu 12.04): pastebin.com/bSLK63CU (upd: removed two push "route")
UPDATE 2
/etc/rc. local
#iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
#iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
bash /etc/openvpn/start.sh
exit 0
/usr/bin/setterm -blank 0 -powerdown 0

Probably still need to talk about the unusual features of launching openvpn (start.sh). After installing openvpn on a clean system, the server did not want to start, giving an error (nothing is written in the log for service start).
Sun Oct 19 00:10:34 2014 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Sep 30$
Sun Oct 19 00:10:34 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Oct 19 00:10:34 2014 Diffie-Hellman initialized with 1024 bit key
Sun Oct 19 00:10:34 2014 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Oct 19 00:10:34 2014 Socket Buffers: R=[124928->131072] S=[124928->131072]
Sun Oct 19 00:10:34 2014 ROUTE default_gateway=a.b.c.d
Sun Oct 19 00:10:34 2014 Note: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Sun Oct 19 00:10:34 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Oct 19 00:10:34 2014 /sbin/ifconfig  10.8.0.1 pointopoint 10.8.0.2 mtu 1500
SIOCSIFADDR: No such device
: ERROR while getting interface flags: No such device
SIOCSIFDSTADDR: No such device
: ERROR while getting interface flags: No such device
SIOCSIFMTU: No such device
Sun Oct 19 00:10:34 2014 Linux ifconfig failed: external program exited with error status: 1
Sun Oct 19 00:10:34 2014 Exiting

Therefore, I wrote a small script start.sh - with some kind of crutch (found on some forum).
mkdir /dev/net 
mknod /dev/net/tun c 10 200 
chmod 666 /dev/net/tun
sysctl -w net.ipv4.ip_forward=1 # забавно, что без этой строки тоже не запускалось, после каждого ребута приходится делать, настройка в /etc/sysctl.conf игнорируется словно.
sysctl -p
service openvpn restart

To be honest, I have no idea why this is happening, it may be related to the problem ...
UPDATE 3: I forgot to mention it, I leave it for the future. Toolbar.beeline.ru is something that is inserted into all the pages that you open through a phone with a Beeline SIM card. In my case, I accessed the Internet through the phone as a modem. More details about the toolbar were written on Habré: habrahabr.ru/post/230921
UPDATE 4: bad news The problem is not solved. I no longer have 100% cache. i65.fastpic.ru/big/2014/1020/29/c5021d3ac5caa2524e...

Answer the question

In order to leave comments, you need to log in

2 answer(s)
O
oia, 2014-10-19
@oia

m.geektimes.ru/post/76663

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question