chanlists
Dear forum,
I have a weird issue with NAT and UDP packets not getting to a different interface on the VPN server itself, while TCP works. The openvpn server has an interface eth0 with IP IP_of_my_server and a virtual interface et0:0 with IP IP_of_my_server_vpn. Both IP_of_my_server and IP_of_my_server_vpn are on my_network.
The idea is to use the virtual interface with its IP IP_of_my_server_vpn for openvpn. The issue is that UDP traffic to some port on IP_of_my_server does not make it to its destination, while the same protocol works for UDP ports on other hosts in my_network. TCP traffic to IP_of_my_server works, too. Here is the config on the server:
client-cert-not-required
username-as-common-name
plugin /usr/lib/openvpn/openvpn-auth-pam.so krb5
local IP_of_my_server_vpn
port 1195
proto udp
dev tun1
ca my.crt
cert my.crt
key my.key
dh dh2048.pem
server 10.9.0.0 255.255.255.0
ifconfig-pool-persist ipp_1195.txt
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status_1195.log
verb 3
mute 20
topology subnet
push "route IP_of_my_server_vpn 255.255.255.255 net_gateway"
push "route my_network 255.255.255.0"
push "dhcp-option DNS my_dns"
iptables on the server:
my_server:~# iptables -t nat -n -L -v
Chain PREROUTING (policy ACCEPT 22 packets, 2643 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- * * 10.9.0.0/24 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
On the client (Win 7 X64):
auth-user-pass
client
dev tun
proto udp
remote hostname_of_IP_of_my_server_vpn 1195
resolv-retry infinite
nobind
persist-key
persist-tun
ca my_cert.pem
comp-lzo
verb 3
topology subnet
management 127.0.0.1 1195
management-hold
management-query-passwords
auth-retry interact
What's wrong here??? Thanks,
-C
