republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Virtual Private Networking » OpenVPN internet routing
Search Topic:
Uniqs:
564
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
OpenVPN / PAM / RADIUS acct only »
« Server 2k3 cannot connect to VPN via L2TP over IPsec  
AuthorAll Replies


super newbie

@tontut.fi

OpenVPN internet routing

Hello,

I'm trying to route all my internet traffic trough an OpenVPN server. I can ping the VPN-server fine with its VPN IP. With internet traffic I get this:

"Fri May 23 22:38:45 2008 jaakko/193.166.81.153:4963 MULTI: bad source address from client [192.168.11.2], packet dropped"

I've tried all kinds of iptables combinations, but nothing seems to work

Below is some information about my topology, hope it helps.

Server
Public IP: 88.195.215.96
GW: 84.250.64.1

No private IP.

server.conf:

dev tun
proto tcp
port 1194

ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
client-to-client
push "redirect-gateway def1"

--

cat /proc/sys/net/ipv4/ip_forward => returns 1

with iptables i've done: iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

"route -n"

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
88.195.208.0 0.0.0.0 255.255.240.0 U 0 0 0 eth0
0.0.0.0 88.195.208.1 0.0.0.0 UG 0 0 0 eth0

Client
Private IP:

IP Address. . . . . . . . . . . . : 192.168.11.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.11.1

Public IP: 193.166.81.153

Thanks!
Forums » Up and Running » Virtual Private NetworkingOpenVPN / PAM / RADIUS acct only »
« Server 2k3 cannot connect to VPN via L2TP over IPsec  


Wednesday, 08-Oct 00:59:49 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9 years online! © 1999-2008 dslreports.com.
page compression OFF
Most commented news this week
· [128] It's Cable TV Rate Hike Season
· [78] Wholesale Bandwidth Prices Still Dropping
· [71] Half Of New iPhone Owners Came From Verizon
· [64] Supreme Court TiVo/Echostar Ruling
· [58] XOHM Online In Additional Launch Markets
· [54] AT&T Kills Off $20 Unlimited Pre-Paid Data
· [40] Microsoft: U.S. Broadband Policy 'Total Failure'
· [32] Customers Still Annoyed By FiOS Billing
· [23] Verizon Says Alltel Deal On Schedule
· [23] Portland Lets Wi-Fi Network Rust
Most people now reading
· Upgrades [TekSavvy]
· Heads up; Usenet, "Rarpassgen.exe" virus [TekSavvy]
· Texas Realignment Thread - 10/6 [Verizon FIOS TV]
· [XPAV infection?] Cannot log in to windows, nor safe mode [Security]
· Acronis True Image Home 2009 Final Released! [Software]
· sockstress [Security]
· Apple is "making" people dumb [Rants, Raves, & Praise]
· KFC 10.00 challenge [General Questions]