Hi everyone
I have a problem. I have VPS with Openvpn server (debian 6) I try to redirect all internet traffic from pc's over vpn server.
Testing pc is Mint debian edition
Server config
dev tap0
proto tcp-server
mode server
comp-lzo
log-append /var/log/openvpn.log
daemon
ifconfig-pool 192.168.250.2 192.168.250.254
ifconfig 192.168.250.1 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
tls-server
dh keys/server/dh2048.pem
ca keys/server/ca.crt
cert keys/server/server.crt
key keys/server/server.key
cipher AES-256-CBC
port $port_number
user nobody
group nogroup
persist-tun
persist-key
log-append /var/log/openvpn.log
verb 2
Client config
client
proto tcp-client
dev tap
ca ca.crt
dh dh2048.pem
cert pterodaktil.crt
key pterodaktil.key
remote $remote_ip $remote port
cipher AES-256-CBC
user nobody
group nogroup
verb 6
log-append /var/log/openvpn.log
pull
mute 20
keepalive 10 120
comp-lzo
persist-key
persist-tun
resolv-retry infinite
nobind
route table before openvpn up
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.28.2 0.0.0.0 UG 0 0 0 eth0
192.168.28.0 * 255.255.255.0 U 0 0 0 eth0
route table after vpn start
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.28.2 0.0.0.0 UG 0 0 0 eth0
192.168.28.0 * 255.255.255.0 U 0 0 0 eth0
192.168.250.0 * 255.255.255.0 U 0 0 0 tap0
Client connction log:
Thu Jul 19 10:36:00 2012 us=165358 109 variation(s) on previous 20 message(s) suppressed by --mute
Thu Jul 19 10:36:00 2012 us=165416 [server] Inactivity timeout (--ping-restart), restarting
Thu Jul 19 10:36:00 2012 us=165662 TCP/UDP: Closing socket
Thu Jul 19 10:36:00 2012 us=165721 SIGUSR1[soft,ping-restart] received, process restarting
Thu Jul 19 10:36:00 2012 us=165740 Restart pause, 5 second(s)
Thu Jul 19 10:36:05 2012 us=165819 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jul 19 10:36:05 2012 us=165878 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jul 19 10:36:05 2012 us=165905 Re-using SSL/TLS context
Thu Jul 19 10:36:05 2012 us=165935 LZO compression initialized
Thu Jul 19 10:36:05 2012 us=165997 Control Channel MTU parms [ L:1592 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Jul 19 10:36:05 2012 us=166031 Socket Buffers: R=[87380->131072] S=[16384->131072]
Thu Jul 19 10:36:05 2012 us=166049 Data Channel MTU parms [ L:1592 D:1450 EF:60 EB:135 ET:32 EL:0 AF:3/1 ]
Thu Jul 19 10:36:05 2012 us=166073 Local Options String: 'V4,dev-type tap,link-mtu 1592,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,$
Thu Jul 19 10:36:05 2012 us=166084 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1592,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key$
Thu Jul 19 10:36:05 2012 us=166102 Local Options hash (VER=V4): '44fbca6b'
Thu Jul 19 10:36:05 2012 us=166118 Expected Remote Options hash (VER=V4): '570d8093'
Thu Jul 19 10:36:05 2012 us=166133 Attempting to establish TCP connection with [AF_INET]84.200.51.171:44176 [nonblock]
Thu Jul 19 10:36:06 2012 us=166265 TCP connection established with [AF_INET]84.200.51.171:44176
Thu Jul 19 10:36:06 2012 us=166322 TCPv4_CLIENT link local: [undef]
Openvpn starting as root.
Help to configure auto change of route table
