openvpn

openvpn.MyVPNProvider=openvpn
openvpn.MyVPNProvider.config='/etc/openvpn/MyVPNProvider.ovpn'
openvpn.MyVPNProvider.enabled='1'
openvpn.MyVPNProvider2=openvpn
openvpn.MyVPNProvider2.config='/etc/openvpn/MyVPNProvider2.ovpn'
drwxr-xr-x    2 root     root          4096 Apr 12 15:45 .
drwxr-xr-x   22 root     root          4096 Apr  9 05:08 ..
-rw-r--r--    1 root     root            50 Apr 13 22:49 MyVPNProvider.auth
-rw-r--r--    1 root     root          6151 Apr 13 22:49 MyVPNProvider.ovpn
-rw-r--r--    1 root     root            50 Apr 13 22:50 MyVPNProvider2.auth
-rw-r--r--    1 root     root          6153 Apr 13 22:50 MyVPNProvider2.ovpn
-rw-------    1 root     root           248 Apr 10 23:03 client.conf
-rwxr-xr-x    1 root     root           363 Apr 10 23:02 client.sh
-rwxr-xr-x    1 root     root           200 Apr 11 00:51 killswitch.sh
==> /etc/openvpn/MyVPNProvider.auth <==
egjqu1vwdl3qs4v8xwlzd8fn
3jntue5i54x7cyketaryouc5

==> /etc/openvpn/MyVPNProvider.ovpn <==

dev tun0
fast-io
persist-key
persist-tun
nobind
remote country-ca-version-2.vpnprovider.com 1195

remote-random
pull
comp-lzo no
tls-client
verify-x509-name Server name-prefix
ns-cert-type server
key-direction 1
route-method exe
route-delay 2
tun-mtu 1500
fragment 1300
mssfix 1200
verb 3
cipher AES-256-CBC
keysize 256
auth SHA512
sndbuf 524288
rcvbuf 524288
auth-user-pass MyVPNProvider.auth
pull-filter ignore "redirect-gateway"

<cert>
-----BEGIN CERTIFICATE-----
xxx
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
xxx
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
xxx
-----END OpenVPN Static key V1-----
</tls-auth>
<ca>
-----BEGIN CERTIFICATE-----
xxx
-----END CERTIFICATE-----
</ca>

==> /etc/openvpn/MyVPNProvider2.auth <==
xxxx
xxxx

==> /etc/openvpn/MyVPNProvider2.ovpn <==

dev tun0
fast-io
persist-key
persist-tun
nobind
remote country-2-ca-version-2.vpnprovider.com 1195

remote-random
pull
comp-lzo no
tls-client
verify-x509-name Server name-prefix
ns-cert-type server
key-direction 1
route-method exe
route-delay 2
tun-mtu 1500
fragment 1300
mssfix 1200
verb 3
cipher AES-256-CBC
keysize 256
auth SHA512
sndbuf 524288
rcvbuf 524288
auth-user-pass MyVPNProvider.auth
pull-filter ignore "redirect-gateway"

<cert>
-----BEGIN CERTIFICATE-----
xxxx
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
xxxx
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
xxxx
-----END OpenVPN Static key V1-----
</tls-auth>
<ca>
-----BEGIN CERTIFICATE-----
xxxx
-----END CERTIFICATE-----
</ca>

==> /etc/openvpn/client.conf <==
user nobody
group nogroup
#script-security 2
#up /etc/openvpn/client.sh
#down /etc/openvpn/client.sh
#script-security 2
#up /etc/openvpn/client.sh
#down /etc/openvpn/client.sh
script-security 2
up /etc/openvpn/client.sh
down /etc/openvpn/client.sh

==> /etc/openvpn/client.sh <==
#!/bin/sh
env | sed -n -e "
/^foreign_option_.*=dhcp-option.*DNS/s//nameserver/p
/^foreign_option_.*=dhcp-option.*DOMAIN/s//search/p
" | sort -u > /tmp/resolv.conf.vpn
case ${script_type} in
(up) uci set dhcp.@dnsmasq[0].resolvfile="/tmp/resolv.conf.vpn" ;;
(down) uci set dhcp.@dnsmasq[0].resolvfile="/tmp/resolv.conf.auto" ;;
esac
/etc/init.d/dnsmasq restart &

==> /etc/openvpn/killswitch.sh <==
#!/bin/sh
if pgrep openvpn
then
uci set firewall.lan_wan.enabled="1"
/etc/init.d/openvpn stop &
else
uci set firewall.lan_wan.enabled="0"
/etc/init.d/openvpn start &
fi
/etc/init.d/firewall restart &