Connected to server but no Internet access

cormogram

Hi guys! I'm trying to figure out what's wrong with the following setup:

Server: OpenVPN Server 2.2.2 on CentOS 5.8 (64-bit)
Client: OpenVPN Client 1.5.6 on Windows 7 (64-bit)

Since I didn't have access to any repo with OpenVPN I've installed from the source using LZO 1.08[1], pkcs11-helper 1.10[2] and OpenVPN 2.2.2[3].

To avoid man-in-the-middle attack I've chosen to use 2 CAs (ca-server.crt and ca-client.crt).

The server[4] has authenticated the client[5] and assigned the IP. They can ping each other but the client doesn't have Internet access even when both firewalls are turned off. A port forward (UDP 1194) has also been enabled in the client router firewall.

Please, can you give me some ideas on how to solve this problem?

Thanks in advance.

---server route table---

[root@server openvpn]# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.255.255.1    *               255.255.255.255 UH    0      0        0 eth0
10.8.0.2        *               255.255.255.255 UH    0      0        0 tun0
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun0
default         10.255.255.1    0.0.0.0         UG    0      0        0 eth0

---client route table---

C:\>netstat -r
[...]
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.25.1     192.168.25.5     10
          0.0.0.0        128.0.0.0         10.8.0.1         10.8.0.2     30
         10.8.0.0  255.255.255.252         On-link          10.8.0.2    286
         10.8.0.2  255.255.255.255         On-link          10.8.0.2    286
         10.8.0.3  255.255.255.255         On-link          10.8.0.2    286
     74.208.65.25  255.255.255.255     192.168.25.1     192.168.25.5     10
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0         10.8.0.1         10.8.0.2     30
     192.168.25.0    255.255.255.0         On-link      192.168.25.5    266
     192.168.25.5  255.255.255.255         On-link      192.168.25.5    266
   192.168.25.255  255.255.255.255         On-link      192.168.25.5    266
    192.168.114.0    255.255.255.0         On-link     192.168.114.1    276
    192.168.114.1  255.255.255.255         On-link     192.168.114.1    276
  192.168.114.255  255.255.255.255         On-link     192.168.114.1    276
    192.168.145.0    255.255.255.0         On-link     192.168.145.1    276
    192.168.145.1  255.255.255.255         On-link     192.168.145.1    276
  192.168.145.255  255.255.255.255         On-link     192.168.145.1    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.25.5    266
        224.0.0.0        240.0.0.0         On-link          10.8.0.2    286
        224.0.0.0        240.0.0.0         On-link     192.168.114.1    276
        224.0.0.0        240.0.0.0         On-link     192.168.145.1    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.25.5    266
  255.255.255.255  255.255.255.255         On-link          10.8.0.2    286
  255.255.255.255  255.255.255.255         On-link     192.168.114.1    276
  255.255.255.255  255.255.255.255         On-link     192.168.145.1    276
===========================================================================

[1] http://openvpn.net/release/lzo-1.08-4.rf.src.rpm
[2] https://github.com/downloads/alonbl/pkcs11-helper/pkcs11-helper-1.10.tar.bz2
[3] http://swupdate.openvpn.org/community/releases/openvpn-2.2.2.tar.gz

[4] ---server.conf---

local 9.9.9.9
port 1194
proto udp
dev tun
ifconfig 10.8.0.1 10.8.0.2
route 10.8.0.0 255.255.255.0
push "route 10.8.0.1"
push "route 9.9.9.9 255.255.255.0 10.8.0.1"
tls-server
ca ca-client.crt
dh dh4096.pem
cert server.crt
key server.key
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 3

[5] ---client.ovpn---

client
dev tun
proto udp
remote 9.9.9.9 1194
ifconfig 10.8.0.2 10.8.0.1
resolv-retry infinite
nobind
user nobody
group nobody
persist-tun
persist-key
ca ca-server.crt
cert client.crt
key client.key
remote-cert-tls server
comp-lzo
ping 15
verb 3

elpin

Only an OpenVPN amateur here, but do you need the "push redirect-gateway" directive in the server config? Because that's what's routing the client's internet access throught VPN which I believe you don't want, right?

cormogram

elpin wroteOnly an OpenVPN amateur here, but do you need the "push redirect-gateway" directive in the server config? Because that's what's routing the client's internet access throught VPN which I believe you don't want, right?

No. I want the client to connect through the server Internet link (like a proxy). The server is in a datacenter and has only one NIC (eth0) which is used to connect to the client and the Internet.