Hi
So I setup openVPN on my VPS server today, it was pre-installed with an easy install openVPN option, which meant that I was initially sent the client config file and the key file via email which I could then use.
I am able to connect to the openVPN server from my android phone but when i try and access any webpage it doesn't connect. Below is as a bunch of information I am hoping will be useful to someone to help me troubleshoot.
The first thing i noticed was on the actual server when I try and ping google.com i get the following:
root@x:/home/user# ping www.google.com
PING www.l.google.com (173.194.41.114) 56(84) bytes of data.
64 bytes from lhr08s02-in-f18.1e100.net (173.194.41.114): icmp_req=1 ttl=55 time=1.50 ms
64 bytes from lhr08s02-in-f18.1e100.net (173.194.41.114): icmp_req=2 ttl=56 time=1.42 ms
^C
I have tried to do a bit of my own troubleshooting and i ran tcpdump on the server and noticed two things:
3G
when i try and access the openVPN when i am on 3G network, when i try an access specific webpages such as
www.test.com or
www.ibm.com i can see these pass through the tcpdump, but the webpages still don't load.Example:
22:02:29.894621 IP 172.16.10.2.22782 > ns1.nycmar01.spcsdns.net.domain: 21860+ A? www.test.com. (30)
22:02:34.921241 IP 172.16.10.2.64164 > ns2.nycmar01.spcsdns.net.domain: 21860+ A? www.test.com. (30)
22:02:36.001310 IP 172.16.10.2.26153 > ns1.nycmar01.spcsdns.net.domain: 25294+ A? www.ibm.com. (29)
22:02:38.420757 IP 107-55-9-98.pools.spcsdns.net.44543 > qc-in-f188.1e100.net.5228: Flags [.], ack 2295073042, win 12792, options [nop,nop,TS val 1503704 ecr 3332358945], length 0
22:02:39.902538 IP 172.16.10.2.26366 > ns1.nycmar01.spcsdns.net.domain: 25598+ A? www.test.com. (30)
22:02:40.976367 IP 172.16.10.2.34869 > ns2.nycmar01.spcsdns.net.domain: 25294+ A? www.ibm.com. (29)
Wifi
When I access the openVPN on my wifi network on my android phone, again I can connect and webpage don't load, but this time when i run the tcpdump on the server, i do not see the webpages i search for, i have included an example of the tcpdump:
22:07:16.678503 IP 172.16.10.2.32915 > www170.sedoparking.com.www: Flags [S], seq 2830469196, win 5840, options [mss 1366,sackOK,TS val 1574956 ecr 0,nop,wscale 1], length 0
22:07:18.156749 IP 172.16.10.2.47111 > vc-in-f105.1e100.net.https: Flags [S], seq 2844827369, win 5840, options [mss 1366,sackOK,TS val 1575334 ecr 0,nop,wscale 1], length 0
22:07:18.156788 IP 172.16.10.2.52106 > vc-in-f103.1e100.net.https: Flags [S], seq 2846382947, win 5840, options [mss 1366,sackOK,TS val 1575334 ecr 0,nop,wscale 1], length 0
22:07:18.156806 IP 172.16.10.2.54065 > vc-in-f103.1e100.net.www: Flags [S], seq 2844073497, win 5840, options [mss 1366,sackOK,TS val 1575336 ecr 0,nop,wscale 1], length 0
22:07:20.636833 IP 172.16.10.2.40201 > vc-in-f99.1e100.net.www: Flags [S], seq 2786778225, win 5840, options [mss 1366,sackOK,TS val 1575968 ecr 0,nop,wscale 1], length 0
22:07:21.670361 IP 172.16.10.2.59611 > vc-in-f147.1e100.net.www: Flags [S], seq 2945492511, win 5840, options [mss 1366,sackOK,TS val 1576232 ecr 0,nop,wscale 1], length 0
^C
Here is the server config
dev tun
ifconfig 172.16.10.1 172.16.10.2
keepalive 10 60
#proto tcp-server
proto udp
port 12056
user nobody
group nogroup
persist-tun
persist-key
#comp-lzo
verb 3
secret /etc/openvpn/static.key
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 208.67.222.222"
status openvpn-status.log
log /var/log/openvpn.log
Here is the client config
dev tun
remote 78.110.x.x
ifconfig 172.16.10.2 172.16.10.1
keepalive 10 60
proto udp
port 12056
persist-tun
persist-key
verb 3
redirect-gateway def1
secret 83e3869c.key
