Thanks to donpaul for his work in bringing VPN to linuxmce. I'm excited about streaming video from the core to an external pc or my iphone using this.

I typically get 50kb/s from my core to another consumer quality point of access over the VPN. This is not enough to stream most of video material in my library, from my initial tests. I assume there are ways to compress the video in realtime and stream it at a lower bitrate so that I don't need to create lower quality copies of all my material just for remote viewing.

Where can I learn more about implementing something like this? I read up a bit on mediatomb, and I get the impression it can do this. I'd like to know what I need in the way of a client (on a PC or iphone) and what configuration needs to happen on the two ends.

Thanks,

Dave

are you trying to argue with me over my own code?

Not at all, just posting my observations in the hopes that it may help others in the future.

this is not needed and just coincidence [...] You probably rebooted the core or something like that when replacing the binary.

Hari

Actually I didn't. Before replacing the binary I rebooted, reloaded the router, removed the usb stick, replaced the usb stick, and did a spiritual dance around my CORE about 20 times in just about every possible sequence to no avail. As soon as I replaced the binary it started working instantly.

Having a similar issue with the Aeon, but with ACT Homepro Dimmable Lamp Modules. After pairing and pluggin in the stick, it says

"Waiting for the new device to startup..... One moment, please."

Then says

"The device failed to start properly. Something is not right."

Here's the ZWave device log:

Code:

Return code: 2
2 09/03/09 21:03:51 32 (spawning-device) Device requests restart... count=1/50 dev=32
Thu Sep  3 21:03:51 EDT 2009 Restart
========== NEW LOG SECTION ==========
1 09/03/09 21:03:59 32 (spawning-device) Starting... 1
1 09/03/09 21:03:59 32 (spawning-device) Found ./ZWave
05 09/03/09 21:04:00.020 Creating child 33 <0xb794e6c0>
05 09/03/09 21:04:00.020 Note: Device manager has attached a device of type 1820 that this has no custom event handler for.  It will not fire events. <0xb794e6c0>
05 09/03/09 21:04:00.020 Note: Device manager has attached a device of type 1820 that this has no custom handler for.  This is normal for IR. <0xb794e6c0>
05 09/03/09 21:04:00.021 Creating child 34 <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 1922 that this has no custom event handler for.  It will not fire events. <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 1922 that this has no custom handler for.  This is normal for IR. <0xb794e6c0>
05 09/03/09 21:04:00.021 Creating child 39 <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 1945 that this has no custom event handler for.  It will not fire events. <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 1945 that this has no custom handler for.  This is normal for IR. <0xb794e6c0>
05 09/03/09 21:04:00.021 Creating child 45 <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom event handler for.  It will not fire events. <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom handler for.  This is normal for IR. <0xb794e6c0>
05 09/03/09 21:04:00.021 Creating child 46 <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom event handler for.  It will not fire events. <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom handler for.  This is normal for IR. <0xb794e6c0>
05 09/03/09 21:04:00.021 Creating child 47 <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom event handler for.  It will not fire events. <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom handler for.  This is normal for IR. <0xb794e6c0>
05 09/03/09 21:04:00.021 Creating child 48 <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom event handler for.  It will not fire events. <0xb794e6c0>
05 09/03/09 21:04:00.021 Note: Device manager has attached a device of type 38 that this has no custom handler for.  This is normal for IR. <0xb794e6c0>
05 09/03/09 21:04:03.117 No callback received: await_callback: -1 timer: 31 <0xb794db90>
05 09/03/09 21:04:03.325 Got reply to ZW_MEMORY_GET_ID, Home id: 0x00061b58, our node id: 1 <0xb794db90>
05 09/03/09 21:04:03.537 Got reply to GET_SUC_NODE_ID, node: 1 <0xb794db90>
05 09/03/09 21:04:04.006 Finished building node list: <0xb794db90>
05 09/03/09 21:04:04.006 Node: 1 basic: 0x2 generic: 0x2 specific: 0x1 pluto: 1945 <0xb794db90>
05 09/03/09 21:04:04.006 Node: 4 basic: 0x3 generic: 0x11 specific: 0x1 pluto: 38 <0xb794db90>
05 09/03/09 21:04:04.006 Node: 5 basic: 0x3 generic: 0x11 specific: 0x1 pluto: 38 <0xb794db90>

EDIT: For shits and giggles, I installed the new driver (even though I'm running 810 and read that it was already included in 810). Everything's running fine now as far as I can tell.

be sure to go to launch manager, and shut down core and media station.

then from a console:

Code:

mysql -uroot

drop database pluto_media;
quit

cp /usr/pluto/database/media.sqlcvs .

/usr/pluto/bin/sqlCVS -r media import

That will re-flash your media database with a fresh copy from the release.

-Thom

Does this work in 810? How do you stop the Core and MD in 810?

I'm not sure build.sh is running from Configure_OpenVPN_Keys.sh... when I run the script manually it generates the keys directory along with all the keys, but does not do this when run from Configure_OpenVPN_Keys.sh

I don't know anything much about .sh scripts, but is the spawn syntax correct?

EDIT: the problem is that the 'expect' package is not installed by default. Add it to the list of packages installed in the script.

Sorry! Not yet 

#ls /etc/openvpn/easy-rsa/2.0/

build-ca          build-key-server  list-crl              revoke-full
build-dh          build-req         Makefile              sign-req
build-inter       build-req-pass    openssl-0.9.6.cnf.gz  vars
build-key         build.sh          openssl.cnf           whichopensslcnf
build-key-pass    clean-all         pkitool
build-key-pkcs12  inherit-inter     README.gz

There's no /keys directory here either... I'm not sure why the keys aren't being generated in their proper location.

You can use a domain name with IAX, so your DNS solution should work.

I'm by no means an expert either. If it's a common networking issue, can someone explain why I can access lmce-admin (http) using the public IP of my core from within the lmce internal network, but the same is not true for this IAX service?

Did you run the script as root? I never get those errors when run as root. I will be making changes and incorporating OpenVPN into LinuxMCE web admin soon.

Yes, I ran as root.

After the script terminates the contents of /etc/openvpn/easy-rsa/ are as follows:

1.0  2.0  build.sh

There is no /keys directory.

By VSP I assume you mean Voip Service Provider. My VSP is iax04.unlimitel.ca (209.217.98.134) and is most definitely connecting to my core via IAX. Why Rogers and Magma Communications IPs are involved is beyond me.

My reason for wanting to try openvpn, fyi, is as follows:

My workplace has a seriously draconian IT policy, dispite being a small company. I have HTTP, HTTPS (thankfully), FTP, RDP, and not much more in the way of non-firewalled ports. I want to use my core at home as a proxy to allow me unrestricted web communications. I can use ssh tunnelling via putty for most things, but not anything UDP (such as my office IAX/SIP softphone). I tried to ssh tunnel port 1723 to my core, and tried to establish a pptp vpn connection to no avail. Apparently it uses another protocol in tandem with tcp port 1723 (called GRE or something).

I'm interested to know if OpenVPN can do what I want, especially since it uses SSL which is supposedly UDP friendly.

hmmm... strange.... the 24.114.232.x addresses are Rogers Cable ... are you perhaps using Rogers for your iPhone telco? If so, then it looks like your phone is still attempting to connect externally at that point as well as internally.... realistically the only traffic on that interface you should see (when connecting internally) is your VSP, and probably only SIP traffic even then. Theres a stray 209.217.98.134 address to which is Magma Communications (part of Primus Canada).....

The second capture looks much the same.... still seeing traffic on both sides when really you shouldn't.... stronly suspect that the 24.114.232.x addresses are your iPhone's IP address through

Rogers is my ISP, but the test below was done with a softphone client installed on a windows PC inside the lmce internal network, not the iPhone. The iPhone was off. It's all very puzzling 

cp: cannot stat `/etc/openvpn/easy-rsa/keys/ca.crt': No such file or directory
cp: cannot stat `/etc/openvpn/easy-rsa/keys/server.crt': No such file or directory
cp: cannot stat `/etc/openvpn/easy-rsa/keys/server.key': No such file or directory
25829 Mon May 11 16:32:45 CDT 2009 WaitLock 'Firewall' (Firewall)
25829 Mon May 11 16:32:45 CDT 2009 WaitLock 'Firewall' (Firewall) success
Clearing firewall
Enabling packet forwarding
Setting up firewall
Setting up forwarded ports
  Source port: 3080/tcp; Destination: 127.0.0.1:80
  Source port: 21/tcp; Destination: 192.168.80.254:21
  Source port: 1194/tcp; Destination: 192.168.80.1:1194
  Source port: 3877/tcp; Destination: 192.168.80.1:3877
Opening specified ports to exterior
  Port: 4569:4569/udp
  Port: 5060:5060/udp
  Port: 2000:2000/udp
  Port: 2000:2000/tcp
  Port: 22:22/tcp
  Port: 55237:55237/tcp
25829 Mon May 11 16:32:46 CDT 2009 Unlock 'Firewall' (Firewall)
25829 Mon May 11 16:32:46 CDT 2009 Unlock 'Firewall' (Firewall) success
Stopping virtual private network daemon:.
Starting virtual private network daemon: lmce-server(FAILED).

I just downloaded and ran the script, and got the same errors krys_ got before.

[Here is a 30s log of IAX traffic when the client attempts (and succeeds) to register using 192.168.80.1, on both eth0 and eth1 interfaces:]

Well the issue is NOT specifically with the iphone. I installed an IAX softphone on one of my PCs on the linuxmce internal network, and the same thing happens.
   ie. can connect no problem to 192.168.80.1, but not to <MY INET IP>.

Here is a 30s log of IAX traffic when the client attempts (and succeeds) to register using 192.168.80.1, on both eth0 and eth1 interfaces:

http://pastebin.com/m2efb08bf

Here is a 30s log of IAX traffic when the client attempts (and fails) to register using <MY INET IP>, on both eth0 and eth1 interfaces:

http://pastebin.com/m7dbfc87f

I have no idea what 24.114.232.35 is. It's not my IP, nor does it belong to my VOIP provider (iax04.unlimitel.ca)

That's just it... There isn't any CLI output, unless of course I use the settings that work mentioned in the original post at which point it mentions successful registration etc. 

This suggests the packets sent when the phone tries to register aren't even making it to Asterisk. Is there a way to trace the packets through the various stages of routing that occurs within the core, to see where they are getting stopped? I suppose it's possible they're not even leaving the iPhone (if apple's draconian firmware is meddling with things) This is beyond my level of troubleshooting... Appreciate your help.