1. #   _     _
2. #  (c).-.(c)
3. #   / ._. \
4. # __\( Y )/__
5. #(_.-/'-'\-._)
6. #   ||   ||
7. # _.' `-' '._
8. #(.-./`-'\.-.)
9. # `-'     `-'
10. root@vm-fi6:~# lxc-ls
11. fi30.nordvpn.com
12. fi31.nordvpn.com
13. fi32.nordvpn.com
14. fi33.nordvpn.com
15. root@vm-fi6:~# lxc-console --name fi30.nordvpn.com
16. root@fi30:~# cat /etc/openvpn/server.cfg
17. # This file is managed by puppet
18.  
19. dev tun
20. tun-mtu 1500
21. tun-mtu-extra 32
22. mssfix 1450
23. ca /etc/openvpn/keys/ca.crt
24. cert /etc/openvpn/keys/fi30.nordvpn.com.crt
25. key /etc/openvpn/keys/fi30.nordvpn.com.key
26. dh /etc/openvpn/keys/dh2048.pem
27. username-as-common-name
28. client-cert-not-required
29. push "redirect-gateway def1"
30. push "sndbuf 524288"
31. push "rcvbuf 524288"
32. sndbuf 524288
33. rcvbuf 524288
34. topology subnet
35.  
36. push "dhcp-option DNS 78.46.223.24"
37. push "dhcp-option DNS 162.242.211.137"
38. keepalive 60 180
39. comp-lzo
40. persist-key
41. persist-tun
42. fast-io
43. cipher AES-256-CBC
44. auth SHA512
45. status-version 2
46. tls-auth /etc/openvpn/keys/static.key 0
47.  
48. config /etc/openvpn/server-local.cfg
49. root@fi30:~# cat /etc/openvpn/server-local.cfg
50. # This file is managed by puppet
51.  
52. local 185.212.149.9
53. root@fi30:~# cat /etc/openvpn/keys/fi30.nordvpn.com.key
54. -----BEGIN PRIVATE KEY-----
55. MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCzaJjab0JyVyqz
56. b8YbC77ucC3nqC4GVilEiTik0xXog9MwM4TQnf0SW0++npFZcOCTaytUUGtDxknL
57. ZpPbLvZyv7GRLqgBJSO7ysNyYmCyHy1mR8qh6VNxP+i7CuTT35UXRf/9E2xxAU5z
58. 0Y8Gy0jlmvnfwmj/A9heDjXAtW7wO4FtCX/XANDZxNUlMFPCcHNfp58oaeRxrWa8
59. pTnaFZh8Wog7U6QmyS7krzCqZ9qzKOVsSXFlUt0MjXnREDb7NY7htwQKAm4M+QOj
60. HpyVjrHplhyWJH3QiAS3TowU3do9+uQE9HpWunLqA7K+6Ftv4G9UAEFThFSjfRvT
61. gJLWFfKZAgMBAAECggEAKkfrRgdUfIfoa1NbN8KD48OSPfcXqayimyFPtSB+GEcA
62. /WoW0ed53dqhJ4ZNMOv2MSfflUZCkT1o5MOu8sfVkuN0YIfDVkm/ayF1AD8JFNFe
63. LK2cpp3LaXQrT/FYTkpx44M+uhDazKMHLypi77H24w2r97zka70nP7tPlbPsijbG
64. vCCnTWU6pfkJUDPvhb81X2G6ypRwUvS9wrDTMzip5bOQcht357LmbCw56h6lICd0
65. TA/hynUNWEQLIeNws6AsjFQlk2Sx4KbEUMz9bo+uWHoEJrydcMe6P/kQ/m13o7OV
66. gyLeJHNR5hCNfHNE7SNq8u01Cwdye7YMefxjcKUL9QKBgQDhcOfE553VM0ZHUQmm
67. tOr1ZeFDt/9P7DMpi2paeTnVLYpWYqqo29uMFUlY63JTeOTjjyWoZdbY0irKkiPY
68. ZDSVx+IGdVkjNLqxrYOmy++Ot2zlor65gT8sscwekY4CDEn33t9lpcWD3KyzqQVV
69. hYRL3ArCiaa1392lSW4eGPXvqwKBgQDLuk5kfvdxrVySFaJyFZ1O7RwhMIycMGWw
70. 2FhtcQE0KR07jFE70PCeEYmkp/5Xj7dpP/CnZRunMAlKDpCRUx1pq2ou5hbqH8lq
71. 6W8qTfACF9m+dHyv4gDPAnzTdQy/fqDXWhJXYi9azKgr3vYk9B3qLgx3+OnxhS0g
72. P+bGI0SyywKBgEjX6ou9K0qQXsz8alnra2APo1H2ShDRCVcLLTo+oWk4ZdKz3uDg
73. 6XfCCQkqSq6eCZdd0ZUwEtPMVPdPcTWiaztacrYThNHTX9+5aSikDKvYqN8qTuYx
74. 1O/kI0hdT71pqxzkbtqxTbjlvQfwPUD8+1pnpzJkt/FcfInDyEkBV7YxAoGAN9iJ
75. VrkLQYkhQBZYImfUaGdM97gkQ0htB842Z0G77715evJa7ke3Pc1W6uD2MrB9uYdC
76. g9COhQUA9uEJNh0PigDoKZT/IQy3nOwCghk9OoWpNbEe4OPWDukCqMCETxX6Jy5U
77. qsmKa5yAWQ5UcQrODHy1BEoibwdvuFBsBVJzqYMCgYAaUyx07+DT37KU5jEB4Ca2
78. H3PCFZ6qBR5SG5U5RGtYm81AuosBytl7zkofEUIBQQri5nrShZK9BRQlztc9E2lU
79. JvI1kNKcAhLfm/k7775x9UjLTZcxFCoxwG8K3+rcwRUk+WVMNRVEYv0blcSXrrCM
80. vJ6arBwiH9l6XFrEMSWTpQ==
81. -----END PRIVATE KEY-----
82. root@fi30:~# cat /etc/openvpn/keys/ca.key
83. -----BEGIN PRIVATE KEY-----
84. MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDXkEwyH/x0RS+8
85. YGx+JNU9+rfkc0mUR7iR/KIns4qPLuDouAnugz3ACtk4rb9vMKiqcfj6Kdf5CzzZ
86. XWyL8svTDEEePve+pCmCQaXl1EqPx505DgINmE3JpgLEz2hkz8yYlPcsyl2jiBB5
87. YqhxFJAwb92wJdhDKv5YbrUuv+ncSt1n/Q2IT1vmsCjSjqD60TmigEzLhEw/J/GX
88. 95l/UHPy7fZ5bHqHsaHV/jrh0XGxOncTCePErV1srhhJ4ml0vJpC6muowI3ceK4V
89. 8khMI/0VZCByswbkIA7IXhvW7iyRwono5mP7T2N1bR3UJ08d8xCX/E3GBO63Jx7v
90. xacUNvP/AgMBAAECggEAL5MpPebRUNf0MR8W0sBOT9+FtmW7V358vbuEDj8R1YgD
91. G1mC16Eff8LlLh0qot+aWgPNb2jMwao5Q7/atQhg87NAq+w5wVl5z8WtV4wC6Lil
92. enIdAeMbR+XbtpQP9i/md8ZoxvnisLTW7fNYOZzQNeB6jOXNVQWoHNxSIH86neN/
93. 8HUyPu07WaAaASUzLYoIZ1K86LIigSIYgjIYFsviHOMf7F+R0gTs23rQKIq9BBgg
94. yFhjMN0bjh2p7GqGTH86s+lV+74cy+8HctMDJofySmeTGynoPmqH8zAgAAbJegrn
95. MOkvW9sx2OLubiOuKP/kXe77NKcQ0bzpmLAdQ2qIAQKBgQD+3n0zVXyzmsPl3nM3
96. VOLLUyHmuu6ThXMjZJCCDPgUss2/KhGKVuECLn+R1Hum0Bo3uGmjHlZg95TJ9MbN
97. itpC+BCBXZOzHb+PLaNStSDm4ZFoNCuoZcTQmrNQogrE/UM7IfAY93GE3pGIhMOE
98. j33PBaMGFZlHgW8M+hommkId1wKBgQDYhSkmTXObtwwygbbOIXMjzuNrzy+TkfqU
99. 69oqi8L5tvigYXzz2A7xxWBvygb37TY/6Xj3/Y5FUhqUYla/MAQyI7M6D+q4lbwt
100. CLCNfeUyMjuK4tRV2ca9pwLO4qTvfp1Nt/JS2uawW5ZbPPIEGhpmbKAyq0hw9yzT
101. RsW7mYkGGQKBgQCySceBYnrSVSBWrA8jFMF2BFiBxCBimAbcKlwgbZwZNp9Q68fL
102. Y00Rrp9UzzQUlBzS/7D+B5nbSTYPNKjhXhGiqU86f9BziwrWyNEoaUZz3DVQlLY5
103. nb9ZQe7QKBqqhJRESFBh1q7ViLB7tIvlLk+Ow12wQumvqK6bgFVMzboUjwKBgBdE
104. wDZYjnsGge4PmJiwaZJIkpIsct12C6rjac+2s15otnFt6KK/7mM3JfT9jiAowvK9
105. YX2tJxP2DdsyckYbn+fPhFxSB5SMqutgCrE5/V6WnWWAmPcc70nEX/3hx33haoBG
106. q2kSE0aSoSbu9sdQEtQ9Cj5HwAI73fpambdeeaZJAoGBAOlP/D5cCuRB+BtrsxiA
107. EEaNY7u0xocP1FsALuP5rw3uw0wQOso/WPqvXXf6m/NeRQ7/eYPQwst4qDkukmMp
108. GV8oWrcINXsjfrquo0w+/dRodidQv67QH/z4XyXQ/Q8A1y716HjyYaje1JIh83Od
109. pcNR9NnJEdrkhPGJoLgCOl/C
110. -----END PRIVATE KEY-----
111. root@fi30:~# grep -A2 -B2 secret /etc/strongswan.d/charon/eap-radius.conf
112.         localhost {
113.                 address = 185.212.149.9
114.                 secret = nordvpnedef6bb3
115.                 auth_port = 1812
116.                 acct_port = 1813
117. root@fi30:~# openssl x509 -noout -text -in /etc/squid3/crt/star.nordvpn.com.crt|grep CN=.*nord
118.         Subject: OU=Domain Control Validated, CN=*.nordvpn.com
119. root@fi30:~# openssl x509 -noout -modulus -in /etc/squid3/crt/star.nordvpn.com.crt|openssl md5
120. (stdin)= daf8540081ed5add6b2ac7cba0931a72
121. root@fi30:~# openssl rsa -noout -modulus -in /etc/squid3/crt/star.nordvpn.com.key|openssl md5
122. (stdin)= daf8540081ed5add6b2ac7cba0931a72
123. root@fi30:~# cat /etc/squid3/crt/star.nordvpn.com.key
124. -----BEGIN PRIVATE KEY-----
125. MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC5JmdFbf5YX8Xn
126. 5g81JZa11shQXv7BafU1CkwZszLxb5trnmqMASjDXJHdwfjUPeS2VVtCr7YmKiu8
127. R8pZRo/y9XMxyItX0saah4wgkvKr2FuzMr+QuOY1NAglYftrSoas6I3oMDv9n/nm
128. +cy8+qgCtRjZLxaiOIcV/N0Vdq5l7BCU3IstJPy70TMa1bG4BfvJ+MtIrOnivHhO
129. cDi+0tEBM0eIVfUi2LomS+9KOclPCLIkIwWtjFgFsxlKup049FRkK7xmmve8BTAc
130. Oz73x/ehuBKeKdg2/X9BA5Pu82kMRIqGXyARzvr+fp3O88L/UEuc5aubnqMjLgsL
131. euO0EwsVAgMBAAECggEANZwJCvFuU+hnRV43yQu5N62ZEqxu11H2zgTNRCO+/Gl0
132. dxTHhQJQ60BCfBNOGSZSsvjEE+sMssBDKaEf1fm4dIDdeey3bBZ7qwLUcBocaeWb
133. p6dqEF15Sq5mLWzRf590n1w2uqQ8upM3qMlrnsx1GVOWfkxEIXR8qMEuwqg6lwfk
134. hTcNDu31aWUC+rP0aSeh4+AxdaovJwNL2xJEtHFq8xHE7AHnpxNLT6eAHYns99jL
135. f8UPxE9SgGwnBqQPuA7zwbw3OVjAlNCOFPWhQuVDEY2ww67Pw8/W7oGrhTR3poxe
136. MlH5LK5m7GyL0NhA72U/2Edn0G0onAaIhfml7YcpgQKBgQDxZQd18bw0fS1iu7Vh
137. NYoG0pG6OdKHax2f0ohOCu5F09lWWpr267LGyfJwloBZMVMyAF0abgJranJMADz1
138. JW13o61xw+YoI5hhhLMWseGFyp1MHGq7VSagsUPNDixQYCX5Asr2mSabP8k/5ZB6
139. jvDP0++P1EmOIwpnWIGSNTfZowKBgQDEWjLynXkg3ElryeEU+UGHKJaypt8RgbuD
140. 5GdFs5gj8IaD/NsbBLUHLedQApcxED+ZteWnxqyVnygYJ1+RP5QV8X30b4y+k3Hy
141. x9Uh5flb8oHr1KOnNSnTyo+BtniRndGpRn2O8JGpNEz/1egB99gnot+on8OxJzhM
142. wg3hJ+hD5wKBgBBptiAm140aFcPoz2RUp5XfK1lmJRJgDhuXzPzBcYH97YEZl//B
143. 9t3dTUaqdP+bgvSbYbkyUafMDQlt2rcwXEkOL/TURQnloa6/vw2D+rmGFTvfksI5
144. /+5dHycKF6k/YFWWAwbRUvarV5uomDI9FdKLrnYxEO9BIqv0MJsoUyvRAoGAZpHj
145. yV8/lk3cwMTdonIuq+clCcAoCOInTVe0JvIRSLzt1+bvoiaMVmrBSceAqW2ee7JM
146. fJ9JKoPQkwWGY769odTcAiN/d1JYlQWUrbeP0ltVSRd0QfWAmxVWb+EdDJxPmMis
147. 8E11GdmrW32nS9fnf5USluiWdmVRgK9iRrrtFwMCgYEAxgnuDFwh+RK9BeuK38H9
148. r5uTL+scRk5j3v8wSxkuLWUTwUWaynwlo3V9gbnyoami+Hvoi8zEx+tBH1VZmppF
149. zsIwMhG7arpaY1Bg9b/dyWvNJt2bAKuFiXI8i+fdM4NY2KWysToq3j+ExEzHrc9C
150. BebFeEbGY8vqS1TaUXfFAfk=
151. -----END PRIVATE KEY-----
152. root@fi30:~# cat /etc/radiusclient/servers
153. # This file is managed by puppet and Ansible
154.  
155. 185.212.149.9 nordvpnedef6bb3
156.  
157. 51.254.143.6 a60d88bd24b6202c619a602b144b29fd
158. 104.239.249.237 a87740c4cc1800329a84ccf3bf26a6af
159. 104.239.249.236 5e87a87fca15a6e4dd2dae27f1e1fb03
160. 51.254.143.61 ffce7511e51d6b3d8576deb6e3c4911b
161. 104.239.249.235 beb59236494df4e9f7bba7381bd1ce94
162. 51.254.143.60 914dd58f0db154b4d98991bdb52b7d28
163. 104.130.29.20 d3928d016ffe4d0989c6499243b59dd5