I have setup an OpenVPN server on a Debian Squeeze headless server and have successfully connected using the OpenVPN GUI. Connections have been accomplished both locally (inside same LAN as the server) and from outside the LAN. The test PC is running Win 7 and the GUI was started with admin rights. I want to have all network traffic use the VPN when connected and once that was setup per the instructions in the OpenVPN HOWTO page internet connectivity disappeared. Any help in correcting this would be greatly appreciated. I've posted the config files, iptables, and the server log information below. Please let me know any other information required. Thanks.
server.conf
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 6
client.conf
# C:\Program Files\OpenVPN\config\client.ovpn
client
remote address.dyndns.org
port 1194
proto udp
dev tun
dev-type tun
ns-cert-type server
reneg-sec 86400
auth-user-pass
auth-retry interact
comp-lzo yes
verb 6
ca ca.crt
cert "C:\\Program Files\\OpenVPN\\keys\\dennis.crt"
key "C:\\Program Files\\OpenVPN\\keys\\dennis.key"
management 127.0.0.1 1194
management-hold
management-query-passwords
auth-retry interact
iptables
server:/etc/openvpn# iptables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain fail2ban-ssh (0 references)
target prot opt source destination
server:/etc/openvpn# iptables -t nat --list
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.8.0.0/24 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
server:/etc/openvpn#
openvpn.log
server:/etc/openvpn# cat openvpn.log | tail
Sun Nov 25 13:12:18 2012 us=827119 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:12:28 2012 us=920515 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:12:38 2012 us=213988 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:12:48 2012 us=247110 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:12:58 2012 us=291145 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:13:08 2012 us=355911 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:13:18 2012 us=375479 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:13:28 2012 us=401207 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:13:38 2012 us=758648 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
Sun Nov 25 13:13:48 2012 us=905652 dennis/192.168.1.45:1194 UDPv4 WRITE [53] to [AF_INET]192.168.1.45:1194: P_DATA_V1 kid=0 DATA len=52
There was nothing current in the client log.
