Arch Linux User Repository

Thanks to this PR https://github.com/muflone/pkgbuilds/pull/25 the VPN client should automatically add the missing route

Please test it and let me know

Package updated to 9.3.0.3273

Warning for Kerio Control server 9.2.6. The latest compatible VPN client version is 9.2.7.2921. Since 9.2.8 the VPN client is incompatible and requires updated Kerio Control server. In the cause you are a Kerio Control 9.2.6 user please switch to the kerio-control-vpnclient-9.2.7

Hi! I got an error connecting to the VPN (error code 161, auth error). After researching for a few days, I found out that the password is stored in a different format in the kerio-kvc.conf file (XORed in the kvpnc file), I put the plain password there and the VPN worked

Thanks to this PR https://github.com/muflone/pkgbuilds/pull/25 the VPN client should automatically add the missing route

Please test it and let me know

libxcrypt-compat should be added to depends

https://forum.manjaro.org/t/apg-error-while-loading-shared-libraries-libcrypt-so-1/104352/2

Otherwise it fails with:

/usr/lib/kerio-control-vpnclient/kvpncsvc: error while loading shared libraries: libcrypt.so.1: cannot open shared object file: No such file or directory

You can create /usr/local/bin/kerio-change-mac.sh script:

#!/bin/sh

sleep 2
ip link set dev kvnet address "$(awk '/VPN driver opened/ {print $NF}' /var/lib/kerio-control-vpn/logs/debug.log | tail -n1 | sed 's/-/:/g')"
resolvectl -i kvnet dns kvnet x.x.x.x
resolvectl -i kvnet domain kvnet mdomain.com

then run sudo systemctl edit kerio-kvc.service and write

[Service]
ExecStartPost=/usr/local/bin/kerio-change-mac.sh

@krafZLorG Thanks. Works for me well.

sudo tcpdump -t -i kvnet -e

@Zvnrt Thank you. I managed to follow your steps and successfully connect to the server. But I still have some problems. I can connect to a remote DB with IP address but not with domain. Also apply with website. Maybe there are some problem with DNS

@quangdang I'll try to explain as best as i can, since english is not my first language.

Basically once you have kvpnc configured and running, but without reaching your destination network, open your terminal and ping one of your devices in the network you can't reach (like a printer, or a switch, or your gateway, as long as you know the ip address), obviously it wont answer, but leave it running for now, you open wireshark and start to capture in the kvnet internet interface, then look for a package that will have the device you are pinging in the source, and will say Echo (ping) reply" in info, stop the capture, open that package just double clicking on it.

Then you will see something that will say "Dst:" and some letters and numbers with dots, something like 11:22:33:44:55:66, that's the mac address we are looking for, copy that

Then, using the command @krafZLorG shared (ip link set dev kvnet address XX: XX: XX: XX: XX: XX) you change those XX with the mac address that you copied from the package, then run that command and voila! It will work.

So far my downside is that everytime i restart, i have to do this again since kvpnc interface's mac address changes everytime, i'm looking for a way to set it with an specific mac address so it won't change every single time, but at least it works now. Hope i was of some help.

@Zvnrt Could you help me with step by step to make this work?

@krafZLorG It worked! Thank you so much!

If you run wireshark or tcpdump on the kvnet interface, you can see the destination mac address in the packets from the server. It is not the same as mac on the interface. If you change the address on the interface (ip link set dev kvnet address XX: XX: XX: XX: XX: XX), then everything will start working.