Phobios
I have installed openvpn and samba on the same machine on my local network. The OS I am using is archlinux. When I try to access the shares on that machine from the internet on a Windows 7 machine, I get no response even though openvpn is correctly configured and I can connect to it and receive an IP address.
Here are the different configurations:
Server.conf:
port 1194
proto udp
dev tap
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/nas.crt
key /etc/openvpn/keys/nas.key # This file should be kept secret
dh /etc/openvpn/keys/dh2048.pem
server-bridge 192.168.7.1 255.255.255.0 192.168.7.200 192.168.7.250
push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
tls-auth /etc/openvpn/keys/ta.key 0 # This file is secret
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
log-append openvpn.log
verb 3
client.conf:
client
dev tap
dev-node MyTap
proto udp
remote server-ip 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files (x86)\\OpenVPN\\keys\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\keys\\client.crt"
key "C:\\Program Files (x86)\\OpenVPN\\keys\\client.key"
ns-cert-type server
tls-auth "C:\\Program Files (x86)\\OpenVPN\\keys\\ta.key" 1
comp-lzo
verb 3
Iptables is off
the tap and bridge is set up using net-profiles and the two profiles:
openvpn_bridge:
INTERFACE="br0"
CONNECTION="bridge"
DESCRIPTION="OpenVPN Bridge"
BRIDGE_INTERFACES="eth0 tap0"
IP="static"
ADDR="192.168.7.11"
GATEWAY="192.168.7.1"
DNS=("192.168.7.1")
and openvpn_tap:
INTERFACE='tap0'
CONNECTION='tuntap'
MODE='tap'
USER='nobody'
GROUP='nobody'
This is the output from my ifconfig on server:
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 metric 1
inet 192.168.7.11 netmask 255.255.255.0 broadcast 192.168.7.255
inet6 fe80::7479:e3ff:fe0e:c17d prefixlen 64 scopeid 0x20<link>
ether 00:26:18:4d:13:3b txqueuelen 0 (Ethernet)
RX packets 670659 bytes 85822011 (81.8 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 645178 bytes 409953329 (390.9 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth0: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500 metric 1
ether 00:26:18:4d:13:3b txqueuelen 1000 (Ethernet)
RX packets 1671562 bytes 172901439 (164.8 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 3090412 bytes 3815744598 (3.5 GiB)
TX errors 0 dropped 0 overruns 0 carrier 1 collisions 0
device interrupt 45
tap0: flags=4355<UP,BROADCAST,PROMISC,MULTICAST> mtu 1500 metric 1
ether f2:20:ca:f9:40:51 txqueuelen 500 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tap1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 metric 1
inet6 fe80::b8a7:15ff:fe23:6e59 prefixlen 64 scopeid 0x20<link>
ether ba:a7:15:23:6e:59 txqueuelen 100 (Ethernet)
RX packets 13 bytes 696 (696.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 16 bytes 3219 (3.1 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
(For some reason I get two tap interfaces, what is up with that?)
When I try to connect to a share from a remote machine wireshark only shows a bunch of SYNs sent, with no reply whatsoever. I try to ping the server and get no reply. I only get an arp reply when sending an arp request to it. The client also sends a bunch of arp requests meant for the gateway, and I dont get any reply from that either.
Can anyone see anything wrong with my configuration and tell me why it doesnt work?
Thanks.
