Thanks for reading my post, I appreciate it. I'm all new to VPNs and am way out of my comfort zone here, but will try to post as much relevant information as I can think of.
I am running a client of faceless.me's OpenVPN service on my DD-WRT-flashed router (with VPN packages installed). I have managed to find settings that work as far as getting the VPN to (finally!) connect, but to my dismay the moment I bring the VPN online, all local internet access is cut.
Further complicating things is that I would like to figure out how to have one device, an Xbox 360, configured so that it simply does not use the VPN.
My network setup is simple; the modem is bridged to the router, which is 192.168.5.5, and assigns 192.168.5.x IP's via DHCP to clients.
I am having a lot of trouble understanding IP tables, and I suspect they're at the root of the problem as I currently am not using any and am at a loss at where to begin (faceless.me's service is something I desire very much, but their technical support has been lacking as far as helpfulness).
In any case, this is the "client" log, generated when I turn the VPN on, on the DD-WRT:
State
Server: : SUCCESS Local Address: 10.10.14.110 Remote Address: 10.10.14.109 Client: CONNECTED: SUCCESS Local Address: 10.10.14.110 Remote Address: 10.10.14.109
Status
Log
Serverlog Clientlog 20120308 01:21:59 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
20120308 01:21:59 Data Channel Encrypt: Using 128 bit message hash 'MD5' for HMAC authentication
20120308 01:21:59 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
20120308 01:21:59 Data Channel Decrypt: Using 128 bit message hash 'MD5' for HMAC authentication
20120308 01:21:59 D UDPv4 WRITE [46] to 85.17.23.156:1194: P_ACK_V1 kid=0 pid=[ #67 ] [ 40 ]
20120308 01:21:59 Control Channel: TLSv1 cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA 1024 bit RSA
20120308 01:21:59 I [server] Peer Connection Initiated with 85.17.23.156:1194
20120308 01:22:02 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
20120308 01:22:02 D UDPv4 WRITE [128] to 85.17.23.156:1194: P_CONTROL_V1 kid=0 pid=[ #68 ] [ ] pid=28 DATA len=90
20120308 01:22:02 D UDPv4 READ [46] from 85.17.23.156:1194: P_ACK_V1 kid=0 pid=[ #66 ] [ 28 ]
20120308 01:22:02 D UDPv4 READ [138] from 85.17.23.156:1194: P_CONTROL_V1 kid=0 pid=[ #67 ] [ ] pid=41 DATA len=100
20120308 01:22:02 D UDPv4 WRITE [46] to 85.17.23.156:1194: P_ACK_V1 kid=0 pid=[ #69 ] [ 41 ]
20120308 01:22:02 D UDPv4 READ [138] from 85.17.23.156:1194: P_CONTROL_V1 kid=0 pid=[ #68 ] [ ] pid=42 DATA len=100
20120308 01:22:02 NOTE: --mute triggered...
20120308 01:22:02 2 variation(s) on previous 5 message(s) suppressed by --mute
20120308 01:22:02 PUSH: Received control message: 'PUSH_REPLY redirect-gateway dhcp-option DNS 8.8.8.8 redirect-gateway def1 route 10.10.0.1 topology net30 ping 10 ping-restart 120 ifconfig 10.10.14.110 10.10.14.109'
20120308 01:22:02 OPTIONS IMPORT: timers and/or timeouts modified
20120308 01:22:02 OPTIONS IMPORT: --ifconfig/up options modified
20120308 01:22:02 OPTIONS IMPORT: route options modified
20120308 01:22:02 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
20120308 01:22:02 I TUN/TAP device tun0 opened
20120308 01:22:02 TUN/TAP TX queue length set to 100
20120308 01:22:02 I /sbin/ifconfig tun0 10.10.14.110 pointopoint 10.10.14.109 mtu 1500
20120308 01:22:02 D UDPv4 WRITE [46] to 85.17.23.156:1194: P_ACK_V1 kid=0 pid=[ #71 ] [ 43 ]
20120308 01:22:04 /sbin/route add -net 85.17.23.156 netmask 255.255.255.255 gw 142.165.254.1
20120308 01:22:04 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.10.14.109
20120308 01:22:04 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.10.14.109
20120308 01:22:04 /sbin/route add -net 10.10.0.1 netmask 255.255.255.255 gw 10.10.14.109
20120308 01:22:04 I Initialization Sequence Completed
20120308 01:22:10 D UDPv4 WRITE [73] to 85.17.23.156:1194: P_DATA_V1 kid=0 DATA len=72
20120308 01:22:11 D UDPv4 WRITE [89] to 85.17.23.156:1194: P_DATA_V1 kid=0 DATA len=88
20120308 01:22:11 D UDPv4 WRITE [81] to 85.17.23.156:1194: P_DATA_V1 kid=0 DATA len=80
20120308 01:22:11 D UDPv4 WRITE [81] to 85.17.23.156:1194: P_DATA_V1 kid=0 DATA len=80
20120308 01:22:12 MANAGEMENT: Client connected from 127.0.0.1:5001
20120308 01:22:12 D MANAGEMENT: CMD 'state'
20120308 01:22:12 MANAGEMENT: Client disconnected
20120308 01:22:12 MANAGEMENT: Client connected from 127.0.0.1:5001
20120308 01:22:12 D MANAGEMENT: CMD 'state'
20120308 01:22:12 MANAGEMENT: Client disconnected
20120308 01:22:12 MANAGEMENT: Client connected from 127.0.0.1:5001
20120308 01:22:12 D MANAGEMENT: CMD 'state'
20120308 01:22:12 MANAGEMENT: Client disconnected
20120308 01:22:12 MANAGEMENT: Client connected from 127.0.0.1:5001
20120308 01:22:12 D MANAGEMENT: CMD 'state'
20120308 01:22:12 MANAGEMENT: Client disconnected
20120308 01:22:12 MANAGEMENT: Client connected from 127.0.0.1:5001
20120308 01:22:12 D MANAGEMENT: CMD 'state'
20120308 01:22:12 MANAGEMENT: Client disconnected
20120308 01:22:12 MANAGEMENT: Client connected from 127.0.0.1:5001
20120308 01:22:12 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
This is my config file on the client:
route-delay 2
dev tun
proto udp
remote ovpn.faceless.me 1194
client
resolv-retry infinite
tls-client
auth MD5
cipher BF-CBC
ns-cert-type server
comp-lzo
persist-key
persist-tun
verb 6
And as for IP routing tables, I have none. All my settings on this router are stock, save for the wireless encryption (and instead of the router being 192.168.1.1 I decided to give it 192.168.5.5), and so all values can be assumed to be DD-WRT defaults.
I know this may take several replies to help me fix, but in order to see if I can get more help here, I will donate $10 U.S. to the choice of charity of the poster who is able to give me the suggestion that makes this work, and another $10 U.S. to the actual poster as a small token of thanks for his or her help (both via PayPal).
I hope I can make this easy on you by providing relevant information, but please forgive a total newbie for making dumb mistakes here.
