openvpn listneing to all public ips

blackandyellow

i have public ip 92.x.x.x and 93.x.x.x

how can i make openvpn to listen to those ips, by default, openvpn listens to 92.x.x.x. i tried using multiple local arguments in server conf but it only listen to the first one. thanks

maikcat

which os?

Michael.

blackandyellow

centos latest version.

maikcat

if you dont include local statement in your config openvpn binds to all intefaces,
can you check it out using lsof -i?

also what is the output of sestatus command?

Michael.

blackandyellow

openvpn 32240 root 6u IPv4 1651003771 UDP *:openvpn
openvpn 32248 root 6u IPv4 1651003795 UDP *:wap-wsp-wtp

selinux is disabled

maikcat

can you post openvpn log & config?

output of netstat -patune please.

Michael.

blackandyellow

server config

mode server
port 9201
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
server 10.9.2.0 255.255.255.0
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
duplicate-cn
ping-restart 60
comp-lzo
verb 3
cipher none
plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name
auth SHA1
reneg-sec 0
persist-key
persist-tun
status openvpn-status53.log
log log.log

log file

Wed Apr 11 11:31:00 2012 Data Channel MTU parms [ L:1526 D:1450 EF:26 EB:135 ET:0 EL:0 AF:14/26 ]
Wed Apr 11 11:31:00 2012 UDPv4 link local (bound): [undef]:9201
Wed Apr 11 11:31:00 2012 UDPv4 link remote: [undef]
Wed Apr 11 11:31:00 2012 MULTI: multi_init called, r=256 v=256
Wed Apr 11 11:31:00 2012 IFCONFIG POOL: base=10.9.2.4 size=62
Wed Apr 11 11:31:00 2012 Initialization Sequence Completed
Wed Apr 11 11:31:01 2012 MULTI: multi_create_instance called
Wed Apr 11 11:31:01 2012 112.198.77.102:692 Re-using SSL/TLS context
Wed Apr 11 11:31:01 2012 112.198.77.102:692 LZO compression initialized
Wed Apr 11 11:31:01 2012 112.198.77.102:692 Control Channel MTU parms [ L:1526 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 11 11:31:01 2012 112.198.77.102:692 Data Channel MTU parms [ L:1526 D:1450 EF:26 EB:135 ET:0 EL:0 AF:14/26 ]
Wed Apr 11 11:31:01 2012 112.198.77.102:692 Local Options hash (VER=V4): 'c4954d56'
Wed Apr 11 11:31:01 2012 112.198.77.102:692 Expected Remote Options hash (VER=V4): 'ee6fec08'
Wed Apr 11 11:31:01 2012 112.198.77.102:692 TLS: Initial packet from 112.198.77.102:692, sid=6a1c06b4 1991fb6d

i hope maikcat we can fix this issue. thanks

maikcat

please post output of netstat -patune

also are you aware of this:

http://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/

Michael.

blackandyellow

heres the netstat patune

udp        0      0 0.0.0.0:3130                0.0.0.0:*                               0          1625786334 3164/(squid)  
udp        0      0 0.0.0.0:9201                0.0.0.0:*                               0          1651003795 32248/openvpn 
udp        0      0 92.x.x.x:37514       92.x.x.x:53           ESTABLISHED 0          1654276802 7627/sshd: root [pr
udp        0      0 0.0.0.0:45053               0.0.0.0:*                               23         1625786254 3164/(squid)

blackandyellow

im not aware of that link and it sounds complicated. would you help me maikcat. thanks

maikcat

it seems from netstat that openvpn listens to all interfaces..

other services work ok from internet?
how many interfaces your server have?
also can you disable iptables for testing?

can you post netstat -nr output?

if it is routing issue you must read the link... :?

Michael.

blackandyellow

yes all services works, like squid, webmin, they work on all ip addresses.

i have 3 interfaces.

Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
10.9.2.2        0.0.0.0         255.255.255.255 UH        0 0          0 tun1
9.1.1.2         0.0.0.0         255.255.255.255 UH        0 0          0 tun0
9.1.1.0         9.1.1.2         255.255.255.0   UG        0 0          0 tun0
10.9.2.0        10.9.2.2        255.255.255.0   UG        0 0          0 tun1
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 venet0
0.0.0.0         0.0.0.0         0.0.0.0         U         0 0          0 venet0

heres ifconfig

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:96820 errors:0 dropped:0 overruns:0 frame:0
TX packets:96820 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:10990663 (10.4 MiB) TX bytes:10990663 (10.4 MiB)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:9.1.1.1 P-t-P:9.1.1.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

tun1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.9.2.1 P-t-P:10.9.2.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:10157612 errors:0 dropped:0 overruns:0 frame:0
TX packets:12816035 errors:0 dropped:12569 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:1409189260 (1.3 GiB) TX bytes:12752881146 (11.8 GiB)

venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.1 P-t-P:127.0.0.1 Bcast:0.0.0.0 Mask:255.255.255.255
inet6 addr: 26xxxxxxxxxxxxxxxxxxxxxxxxxx/128 Scope:Global
inet6 addr: 26xxxxxxxxxxxxxxxxxxxxxxxxxx/128 Scope:Global
inet6 addr: 26xxxxxxxxxxxxxxxxxxxxxxxxxx/128 Scope:Global
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:182321989 errors:0 dropped:0 overruns:0 frame:0
TX packets:184509631 errors:0 dropped:3179234 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:103966331224 (96.8 GiB) TX bytes:105017907485 (97.8 GiB)

venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:92.x.x.1 P-t-P:92.x.x.1 Bcast:92.x.x.1 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1

venet0:1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.70.190 P-t-P:172.16.70.190 Bcast:172.16.70.190 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1

venet0:2 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:92.x.x.2 P-t-P:92.x.x.2 Bcast:92.x.x.2 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1

venet0:3 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:92.x.x.3 P-t-P:92.x.x.3 Bcast:92.x.x.3 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1

maikcat

your centos is a vm?

if yes ,what hypervisor are you using? openvz?

Michael.

blackandyellow

yes it is OpenVZ Michael

blackandyellow

i saw the article, but my ip addresses, interface referring is like the venet0:x , the virtual ones, and its not appearing to netstat -anr

maikcat

unfortunately i dont have any expierence concerning openzv containers... 🙁

maybe another member can help you out.

sorry.

Michael.

blackandyellow

looks like routing is not a problem since, webmin, squid works fine in other public ips, but openvpn is not??????????????

Mimiko

If "local" directive is not specified, OpnVPN leastens on all interfaces available in the system. Why do you think OpenVPN leastens only on one interface? Are you checking with the client to connect to another IP? May be that IP does not permit port UDP 9201 to be formwarded to the server.