Ask / Submit
12

[how-to] ProtonVPN on Sailfish OS

asked 2017-06-20 13:34:40 +0200

updated 2018-06-01 09:40:22 +0200

How to use ProtonVPN on Sailfish OS

EDIT: Added info on how to avoid IPv6 and DNS leaks since VPN is now out of beta since 2.2.0 and stable enough for daily use

  1. Log into your ProtonVPN account.
  2. Go to "Downloads" and select "DD-WRT router" as platform, protocol may be UDP or TCP.
  3. Select a server you want to connect to.
  4. Download the OVPN file and import it in Settings -> VPN -> OpenVPN -> Import file
  5. Go to "Account" in ProtonVPN for your credentials and copy them into the input boxes on your phone.
  6. Click "Connect" on your phone
  7. Disable IPv6 using the following commands: devel-su sysctl -w net.ipv6.conf.default.disable_ipv6=1 and devel-su sysctl -w net.ipv6.conf.default.disable_ipv6=1
  8. Add following lines:
  • net.ipv6.conf.all.disable_ipv6 = 1
  • net.ipv6.conf.default.disable_ipv6 = 1
  • net.ipv6.conf.lo.disable_ipv6 = 1

    to the IPv6 settings file: devel-su vim /etc/sysctl.d/ipv6-settings.conf

  • Check using ipleak.net that you don't leak your IP any more.

Original question: Hi,

I'm trying to configure ProtonVPN on my Sailfish OS phone but I'm having a little issue here. When I load the OVPN file in Settings and try to connect I get: "Problem with connection"

So I tried it from the command line: "openvpn ch-01.protonvpn.com.udp1194.ovpn" which gave me the following error:

Options error: --up script fails with '/etc/openvpn/update-resolv-conf': No such file or directory
edit retag flag offensive close delete

Comments

I can only guess what you use your VPN for, but Kids, don't do this at home, because disabling IPv6 will, um, disable IPv6. On the VPN servers I build I allow dual-stack connection (either v4 or v6) and dual-stack tunnelling (v4 and v6). So please only do this if you really know what you do.

Maus ( 2018-06-13 00:02:42 +0200 )edit

What is the disadvantage of not enabling IPv6 today, 10/2018?

vandersmash ( 2018-10-13 16:40:26 +0200 )edit

Disabling IPv6 might cause troubles for servers with only an IPv6 address.

Dylan Van Assche ( 2018-10-15 09:11:40 +0200 )edit

2 Answers

Sort by » oldest newest most voted
4

answered 2017-06-20 16:22:27 +0200

Maus gravatar image

Your configuration file contains a line defining a script that is to be run after establishing a VPN connection. The script referenced in the configuration file is /etc/openvpn/update-resolv-conf. A script like this is installed in Debian-like distributions when installing the openvpn package. It is responsible for activating the VPN server supplied DNS lookup servers on your device. As Sailfish/Mer does not provide such a script, you have two options:

  1. Removing/commenting the relevant line in your configuration file and relying on your already active name resolution
  2. Writing a script for Sailfish/Mer that accomplishes this task (i.e., making the system use a certain upstream DNS server)

Option 1 will be OK as long as you are a) fine with using the standard DNS servers and these servers b) deliver the same information as the servers that would be in use with a fully working VPN setup. A VPN is commonly used to provide access to hidden networks, and so even the names in these networks may be hidden. YMMV.

Option 2 will involve reading into how the connection manager "connman" does those things. There's a connman-vpndaemon running on your phone. API documentation for connman and its vpn sub-services seems to be here: https://git.kernel.org/pub/scm/network/connman/connman.git/tree/doc

edit flag offensive delete publish link more

Comments

ProtonVPN seems to offer different types of configurations for different clients, like MacOS, Android, Linux, OpenWRT. You may have more luck with a configuration file for e.g. OpenWRT than with one for “Linux”.

Maus ( 2017-06-21 14:20:54 +0200 )edit

The OpenWRT version connects successfully and works great! I will update this question with a small how-to for other people.

Dylan Van Assche ( 2017-06-22 10:42:22 +0200 )edit
0

answered 2018-08-15 08:20:09 +0200

it is necessary to disable ipv6? because I just use the ovpn, it connect fine, just most server is slow

edit flag offensive delete publish link more

Comments

1

It connects fine but if you go to the ipleak website you see that your IPv6 IP is exposed.

Dylan Van Assche ( 2018-08-15 09:19:45 +0200 )edit

it said not reachable

TMavica ( 2018-08-15 10:40:46 +0200 )edit
Login/Signup to Answer

Question tools

Follow
7 followers

Stats

Asked: 2017-06-20 13:34:40 +0200

Seen: 1,495 times

Last updated: Aug 15 '18