A word of caution

Note! When you connect to the internet through the RiseupVPN you are bypassing any firewalls on your local network. Your computer will get its own IP address on the open internet. This is great, because that way your computer can communicate freely with others without getting blocked. However, bypassing the local firewall also means that your computer is more vulnerable to attack. Therefore, you should enable a firewall on your computer.

Setting up OpenVPN

The Riseup VPN service supports OpenVPN.

Choose a server

[insert vpn-servers]

Configuration in a nutshell

Although each client is different, there are five values that must be configured in your OpenVPN client:

Optional configuration options:

Detailed tutorials

Tor and the Riseup VPN

If you are thinking of running a Tor Exit node on the Riseup VPN, please read this. There is nothing wrong with running a Tor Exit node on top of the VPN, however it can cause a problem that we’d like to avoid.

Tor exit nodes are listed regularly in block lists. This is due to heavy abuse that happens over Tor, so there are lists that are automatically created for every Tor exit node that registers itself on the network. This wouldn’t be a big deal, except that the block lists block the entire network, not just the single IP that you are using. This causes problems for other services, such as sending mail.

Fortunately, there is a way around it, its just a matter of changing your Tor exit policy so that certain ports are not allowed. It seems as if these block lists only list Tor exit nodes that enable certain well-known ports that are used for abuse. According to one of the block list operators a tor exit node is added to the block list if it uses the default exit policy because there are a few ports in the default policy that are problematic, these ports are: 6660-6670, 6697, 7000-7005

This can easily be changed so you do not allow these ports through your Tor exit node by changing your torrc as follows:

ExitPolicy reject *:6660-6670 
ExitPolicy reject *:6697 
ExitPolicy reject *:7000-7005 

and then restarting your tor daemon.