Connected to VPN network but no internet

heiserhorn

Hi

I have a VPN server running on a debian squeeze box with the following config:

local 192.168.2.6
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/tempestus.crt
key /etc/openvpn/easy-rsa/2.0/keys/tempestus.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status.log
verb 3

and I runned this:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

but I have no internet connection.

Any idea?

Cheers

puspharaj

heiserhorn,

I got the same issues on my openvpn server. where i can specify from my windows redirect-gateway 192.168.1.1
from my clinet.ovpn file and it redirects to my modem and i can surf the internet but i lost my connection to my local subnet of the server.

i'm having the openvpn server from aws and let say it has its own subnet address of 10.0.0.0/24 . without specifying redirect-gateway line in my cleint.ovpn file i can ping the aws local server within the private ip 10.0.0.88 and 10.0.0.33 etc..

if i specify that line redirect-gateway in cleint.ovpn file i lost the connection to subnet address

Please any one has answer for this

thanks
Raj

frankuit

Did you do:

echo 1 > /proc/sys/net/ipv4/ip_forward

On your vpn server ? that enables forwarding of traffic on the server.
(be sure to be root when you run this)

Good luck,

Kind regards,
Frank Uittenbosch

heiserhorn

Hi,

For ip forwarding I uncommented the line in /etc/sysctl.conf

Now I have internet. The solution was to enter:

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

If the the system reboots this changes are lost so they need to be saved.

Thank you for helping.

Cheers

Mike