The client connects but cannot browse the internet.
I think this must be a routing issue but any ideas?
client.log
Wed Aug 15 18:49:25 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Aug 15 18:49:25 2012 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Wed Aug 15 18:49:25 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Aug 15 18:49:25 2012 LZO compression initialized
Wed Aug 15 18:49:25 2012 Attempting to establish TCP connection with 84.xxx.xxx.xx:1194
Wed Aug 15 18:49:28 2012 TCP connection established with 84.xxx.xxx.xx:1194
Wed Aug 15 18:49:28 2012 TCPv4_CLIENT link local: [undef]
Wed Aug 15 18:49:28 2012 TCPv4_CLIENT link remote: 84.xxx.xxx.xx:1194
Wed Aug 15 18:49:36 2012 [ProxyPlayer.eu] Peer Connection Initiated with 84.xxx.xxx.xx:1194
Wed Aug 15 18:49:39 2012 TAP-WIN32 device [Local Area Connection 10] opened: \\.\Global\{C8D4C9CA-227F-4C7D-8560-55E3125840CF}.tap
Wed Aug 15 18:49:39 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {C8D4C9CA-227F-4C7D-8560-55E3125840CF} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed Aug 15 18:49:39 2012 Successful ARP Flush on interface [4] {C8D4C9CA-227F-4C7D-8560-55E3125840CF}
Wed Aug 15 18:49:44 2012 Initialization Sequence Completed
server.conf
local 84.xxx.xxx.xx
port 1194 #- port
;proto udp
proto tcp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
client-config-dir /etc/openvpn/ccd
server 10.8.0.0 255.255.255.0
push "redirect-gateway"
;push "dhcp-option DNS 213.171.192.249"
;push "dhcp-option DNS 213.171.192.245"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
log /var/log/openvpn.log
tun-mtu 1500
;fragment 1400
;mssfix
iptables:
# Generated by iptables-save v1.3.5 on Fri Oct 14 16:41:22 2011
*mangle
đŸ˜›REROUTING ACCEPT [243519:150659790]
:INPUT ACCEPT [243519:150659790]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [254653:159009737]
đŸ˜›OSTROUTING ACCEPT [254653:159009737]
COMMIT
# Completed on Fri Oct 14 16:41:22 2011
# Generated by iptables-save v1.3.5 on Fri Oct 14 16:41:22 2011
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [254653:159009737]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 20 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 21 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 53 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 53 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 123 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 8002 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 9001 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 80 -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 8080 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 1935 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 1194 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 1194 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -i tun+ -j ACCEPT
-A RH-Firewall-1-INPUT -i tap+ -j ACCEPT
COMMIT
routing: with client connected
[root@jason keys]# iptables -t nat -L -n -v
Chain PREROUTING (policy ACCEPT 1741 packets, 165K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 769 packets, 61680 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 695 packets, 56980 bytes)
pkts bytes target prot opt in out source destination
[root@jason keys]# ip route show
10.8.0.2 dev tun0 proto kernel scope link src 10.8.0.1
84.xxx.xxx.0/24 dev eth0 proto kernel scope link src 84.xxx.xxx.xx
10.8.0.0/24 via 10.8.0.2 dev tun0
169.254.0.0/16 dev eth0 scope link metric 1002
default via 84.xxx.xxx.1 dev eth0
client not connected to VPN
C:\Documents and Settings\Karine>netstat -nr
Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 16 d4 e0 99 6f ...... Broadcom 440x 10/100 Integrated Controller - Pa
ket Scheduler Miniport
0x3 ...00 19 7e a9 9f 3b ...... Broadcom 802.11g Network Adapter - Packet Sched
ler Miniport
0x4 ...00 ff c8 d4 c9 ca ...... TAP-Win32 Adapter V9 - Packet Scheduler Minipor
0x5 ...08 00 27 00 04 60 ...... VirtualBox Host-Only Ethernet Adapter - Packet
cheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.7 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.7 192.168.0.7 25
192.168.0.7 255.255.255.255 127.0.0.1 127.0.0.1 25
192.168.0.255 255.255.255.255 192.168.0.7 192.168.0.7 25
192.168.56.0 255.255.255.0 192.168.56.1 192.168.56.1 20
192.168.56.1 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.56.255 255.255.255.255 192.168.56.1 192.168.56.1 20
224.0.0.0 240.0.0.0 192.168.0.7 192.168.0.7 25
224.0.0.0 240.0.0.0 192.168.56.1 192.168.56.1 20
255.255.255.255 255.255.255.255 192.168.0.7 192.168.0.7 1
255.255.255.255 255.255.255.255 192.168.56.1 2 1
255.255.255.255 255.255.255.255 192.168.56.1 192.168.56.1 1
255.255.255.255 255.255.255.255 192.168.56.1 4 1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes:
None
client when connected:
C:\Documents and Settings\Karine>netstat -nr
Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 16 d4 e0 99 6f ...... Broadcom 440x 10/100 Integrated Controller - Pa
ket Scheduler Miniport
0x3 ...00 19 7e a9 9f 3b ...... Broadcom 802.11g Network Adapter - Packet Sched
ler Miniport
0x4 ...00 ff c8 d4 c9 ca ...... TAP-Win32 Adapter V9 - Packet Scheduler Minipor
0x5 ...08 00 27 00 04 60 ...... VirtualBox Host-Only Ethernet Adapter - Packet
cheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.8.0.13 10.8.0.14 1
10.8.0.1 255.255.255.255 10.8.0.13 10.8.0.14 1
10.8.0.12 255.255.255.252 10.8.0.14 10.8.0.14 30
10.8.0.14 255.255.255.255 127.0.0.1 127.0.0.1 30
10.255.255.255 255.255.255.255 10.8.0.14 10.8.0.14 30
84.xxx.xxx.xx 255.255.255.255 192.168.0.1 192.168.0.7 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.7 192.168.0.7 25
192.168.0.7 255.255.255.255 127.0.0.1 127.0.0.1 25
192.168.0.255 255.255.255.255 192.168.0.7 192.168.0.7 25
192.168.56.0 255.255.255.0 192.168.56.1 192.168.56.1 20
192.168.56.1 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.56.255 255.255.255.255 192.168.56.1 192.168.56.1 20
224.0.0.0 240.0.0.0 10.8.0.14 10.8.0.14 30
224.0.0.0 240.0.0.0 192.168.0.7 192.168.0.7 25
224.0.0.0 240.0.0.0 192.168.56.1 192.168.56.1 20
255.255.255.255 255.255.255.255 10.8.0.14 2 1
255.255.255.255 255.255.255.255 10.8.0.14 10.8.0.14 1
255.255.255.255 255.255.255.255 192.168.0.7 192.168.0.7 1
255.255.255.255 255.255.255.255 192.168.56.1 192.168.56.1 1
Default Gateway: 10.8.0.13
===========================================================================
Persistent Routes:
None
