OpenVPN bridge and VMware ESXi


When you configure a bridged OpenVPN setup on a VMware ESXi (vSphere Hypervisor) you will notice that you can’t reach anything over the VPN except the OpenVPN host.

This is because VMware by default prevents the NIC to go into promiscuous mode so the bridge won’t work.
To fix this you need to change the VMware security policy to accept promiscuous mode.

  1. Go to ‘Configuration’ in the vSphere client.
  2. Select ‘Networking’ on the left.
  3. Click ‘Properties’
  4. Select ‘VM Network’ on the ‘Ports’ tab.
  5. Click ‘Edit’
  6. Go to the ‘Security’ tab.
  7. Select the check box for ‘Promiscuous Mode’ and select ‘Accept’.

Installing VMware server 2.0.2 on debian 6.0.1 X64


Download VMware-server-2.0.2-203138.x86_64.tar.gz from the vmware website and place it in /usr/src (you need to register on the VMware website before you can download)

Download my install file below and unpack it to /usr/src:

cd /usr/src
wget http://www.troublenow.org/files/vmware/vmware2.0.2-on-debian6.0.1.tar.gz
tar xvzf vmware2.0.2-on-debian6.0.1.tar.gz
cd /usr/src/vmware2
sh install-vmware-2.0.2.sh

This wil unpack the files, patch them for debian 6.0.1 and start the vmware installation.
Answer all the questions during the vmware install and the installation should complete.

Now reboot the server and you should be ready to go.

The above vmware2.0.2-on-debian6.0.1.tar.gz file has the following content:

00-vmware-2.6.32_functional.diff
01-vmware-2.6.32_cosmetic.diff
02-vmnet-include.diff
install-vmware-2.0.2.sh
patch-vmware_2.6.3x.sh
vmware-config.pl.diff

All files except install-vmware-2.0.2.sh are from NerdbyNature.de with some small modifications.
install-vmware-2.0.2.sh is a simple setup script I created for easy install.

References:

ESVA dead but still alive..

ESVA dead but still alive..

It seem’s that the developer of esva (the anti spam vmware appliance) has dropped his work on the project (for a unknow reason). This means that the website www.global-domination.org is down, and there is no more support from the original developer and all the forum’s and documentation is gone, trying to reach the original websites will give you a timeout.

Luckily the project is still alive but it will take some time before everything is back to normal as alot of information needs to be found and put together again.

There is a new forum at: http://www.esvacommunity.com/forum and a new sourceforge page that hosts the project files: https://sourceforge.net/projects/esva-project/

Version 2.0.5.7 is available for download from the sourceforge page but using the esva-upgrade script to upgrade to the latest version won’t work. But there is a workaround to upgrade to the latest version by downloading the files from a other mirror.

i’ve setup a mirror at my own server (as I manage a bunch of esva servers) and I made my own script to update my esva systems to the latest version, its available for download but please check on the forums and sourceforge if there is a new way of upgrading!

user@computer:$ wget http://www.troublenow.org/esva/update/update-esva.sh

sh update-esva.sh

The system will start to upgrade your esva to 2.0.6.0 and reboot automatically after the upgrade.
To view your current version of esva when the system has rebooted:

user@computer:$ cat /var/esva/currentversion

The system should be upgraded to 2.0.6.0 now and ready for mail processing.

Page 1 of 6 12345...»