server not redirecting traffic back to the clients. (openvpn

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
venkata_ramanan
OpenVpn Newbie
Posts: 1
Joined: Tue Aug 21, 2012 9:08 am

server not redirecting traffic back to the clients. (openvpn

Post by venkata_ramanan » Tue Aug 21, 2012 9:12 am

I am trying to setup a openvpn setup where I have one server and one client. Requirement is so basic that client's web traffic should be through the server. I was able to do this before. I am not sure what I messed up with, everything stopped working. Please help me debug this.

I added these two lines to server's conf file

push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"

iptable-save output

# Generated by iptables-save v1.4.14 on Tue Aug 21 14:19:51 2012
*mangle
:PREROUTING ACCEPT [101:8304]
:INPUT ACCEPT [93:7824]
:FORWARD ACCEPT [8:480]
:OUTPUT ACCEPT [93:12327]
:POSTROUTING ACCEPT [101:12807]
COMMIT
# Completed on Tue Aug 21 14:19:51 2012
# Generated by iptables-save v1.4.14 on Tue Aug 21 14:19:51 2012
*filter
:INPUT ACCEPT [96:7944]
:FORWARD ACCEPT [8:480]
:OUTPUT ACCEPT [101:13775]
COMMIT
# Completed on Tue Aug 21 14:19:51 2012
# Generated by iptables-save v1.4.14 on Tue Aug 21 14:19:51 2012
*nat
:PREROUTING ACCEPT [4:240]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [1:76]
:POSTROUTING ACCEPT [1:76]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Tue Aug 21 14:19:51 2012

ifconfig at server

[root@localhost openvpn]# ifconfig eth0: flags=4419 mtu 1500 metric 1 inet 10.0.0.3 netmask 255.255.255.0 broadcast 10.0.0.255 inet6 fe80::225:31ff:fe04:6ac7 prefixlen 64 scopeid 0x20 ether 00:25:31:04:6a:c7 txqueuelen 1000 (Ethernet) RX packets 8547 bytes 855469 (835.4 KiB) RX errors 0 dropped 1 overruns 0 frame 0 TX packets 9122 bytes 1227613 (1.1 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 11 .. tun0: flags=4305 mtu 1500 metric 1 inet 10.8.0.1 netmask 255.255.255.255 destination 10.8.0.2 unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC) RX packets 16 bytes 960 (960.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

ifconfig at client: eth0 Link encap:Ethernet HWaddr 00:0c:29:23:b2:78
inet addr:192.168.5.101 Bcast:192.168.5.255 Mask:255.255.255.0 inet6 addr: fe80::20c:29ff:fe23:b278/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1745 errors:0 dropped:0 overruns:0 frame:0 TX packets:1651 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:325001 (325.0 KB) TX bytes:201954 (201.9 KB) .. tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.6 P-t-P:10.8.0.5 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:87 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:336 (336.0 B) TX bytes:10212 (10.2 KB)

The client side's RX packets is always 0 and the server's TX is always 0. What could be the problem? The last thing that I tried was to forward tun0 of server to my proxy (squid)

iptables -A PREROUTING -t nat -p tcp -i tun0 --dport 80 -j REDIRECT --to-port 3128

User avatar
Mimiko
Forum Team
Posts: 1564
Joined: Wed Sep 22, 2010 3:18 am

Re: server not redirecting traffic back to the clients. (ope

Post by Mimiko » Mon Oct 01, 2012 8:18 am

I think this couse you problem:
push "dhcp-option DNS 10.8.0.1"
You server does not have a DNS servise, so you must better push

Code: Select all

push "dhcp-option DNS 8.8.8.8"

Post Reply