I'm using OpenVPN 2.2.1 on Linux.
I've set my server and client according to
http://openvpn.net/index.php/open-source/documentation/howto.html#policy
I want that "System Administrators" (VPN IP 10.8.1.1) can connect to all servers in internal network and all VPN clients (VPN IPs 10.8.2.1 and 10.8.2.5).
I have enabled IP forwarding on VPN server. I have also set correct static routes on my router since the VPN server is behind a company router on a seperate machine.
iptables on VPN server:
iptables -F
iptables -P FORWARD DROP
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -d 10.66.4.4 -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -d 10.8.1.0/24 -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -d 10.8.2.0/24 -j ACCEPT
iptables -A FORWARD -s 10.8.1.0/24 -d 10.66.4.0/24 -j ACCEPT
iptables -A FORWARD -s 10.8.2.0/24 -d 10.66.4.12 -j ACCEPT
ping from 18.8.1.1 to 10.8.2.1 losses 100% of packets.
I've also tried to add this iptable rule on VPN server:
iptables -I FORWARD -i tun+ -o tun+ -j ACCEPT
but I still can get it to work.
What am I doing wrong ? What am I missing?
