Dear All,
I am getting crazy with this setup:
* Linux openvpn-server
* Windows 7 openvpn-client connecting to the server and working (can access Samba shares, etc.)
* Configuration is to allow other hosts on the client side LAN to use the VPN
* Those hosts on the clientside LAN can ping the openvpn-server and the openvpn-server can ping the clients
Anyway I need to reach such a host on the clientside LAN from the openvpn-server on port 51234. And that does not work. I can reach the client on port 80 or port 110 (and some more), but not on other ports (also port 512 did not work). Of course I tried to connect to that host locally, so it is not the host that is blocking this port. Furthermore I have deactivated the Windows Firewall on the connecting Windows-Client in order to sort that out as a problem. The iptables firewall on the openvpn-server is configured to allow all traffic through the TUN-Device:
-A INPUT -i tun+ -j ACCEPT
-A FORWARD -i tun+ -j ACCEPT
I am really lost. What else could block those ports?
Server-Side-Config:
local 192.168.0.7 #- your_server_ip
port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
push "route 192.168.0.0 255.255.255.0"
push "dhcp-option DNS 192.168.0.7"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status /var/log/openvpn-1194.log
verb 3
client-config-dir ccd
route 192.168.20.0 255.255.255.0
Client-Side config:
client
dev tun
proto udp
remote address.to.host 1194 #- SERVER IP and OPENVPN Port
remote-cert-tls server
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
key client2.key
cert client2.crt
#auth-user-pass
comp-lzo
verb 3
Config in the ccd directory (filename: client2):
iroute 192.168.20.0 255.255.255.0
Thanks for any help.
Benedikt.
