Can not VPN to DD-WRT router behind Comcast router

tambui

After changing my ISP to Comcast, I can not VPN to DD-WRT router any more. Here is what I did:
- From Comcast rounter, I forward port 1194 to DD-WRT router (Linksys E2000)

Here is the log:
Fri Dec 14 15:50:07 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Fri Dec 14 15:50:07 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Dec 14 15:50:07 2012 LZO compression initialized
Fri Dec 14 15:50:07 2012 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Dec 14 15:50:07 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Dec 14 15:50:07 2012 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Dec 14 15:50:07 2012 Local Options hash (VER=V4): '66096c33'
Fri Dec 14 15:50:07 2012 Expected Remote Options hash (VER=V4): '691e95c7'
Fri Dec 14 15:50:07 2012 UDPv4 link local: [undef]
Fri Dec 14 15:50:07 2012 UDPv4 link remote: 98.198.43.49:1194
Fri Dec 14 15:50:07 2012 TLS: Initial packet from 98.198.43.49:1194, sid=2c4223f9 e026990e
Fri Dec 14 15:50:08 2012 VERIFY OK: depth=1, /C=US/ST=TX/L=Houston/O=Bui_Coligado/OU=Office/CN=Server_2008/name=Edwin_Coligado/emailAddress=tamducbui@gmail.com
Fri Dec 14 15:50:08 2012 VERIFY OK: nsCertType=SERVER
Fri Dec 14 15:50:08 2012 Validating certificate key usage
Fri Dec 14 15:50:08 2012 ++ Certificate has key usage 00a0, expects 00a0
Fri Dec 14 15:50:08 2012 VERIFY KU OK
Fri Dec 14 15:50:08 2012 Validating certificate extended key usage
Fri Dec 14 15:50:08 2012 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Dec 14 15:50:08 2012 VERIFY EKU OK
Fri Dec 14 15:50:08 2012 VERIFY OK: depth=0, /C=US/ST=TX/L=Houston/O=Bui_Coligado/OU=Office/CN=server/name=Edwin_Coligado/emailAddress=tamducbui@gmail.com

Please help ....

tambui

Here is my setup:

Office:
ComCast --- DD-WRT -------- PCs
10.121.39.1 10.121.39.xxx

Home:
Timewarner ---- Netgear ----- PC
192.168.1.1

Comcast router setup:
- DD-WRT WAN port is connected to LAN 1 on Comcast
- Forward port 1194 to DD-WRT

Server (DD-WRT) Config:
push "route 10.121.39.0 255.255.255.0"
server 10.121.40.0 255.255.255.0
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
comp-lzo
management localhost 5001

Commands:
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 10.121.40.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

Client Config:
client
dev tun0
float
proto udp
remote xx.xx.xx.xx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Server-2008.crt
key Server-2008.key
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 3

tambui

Still can not connect to the router behind Comcast rounter. Please help.

Here is the log:
Wed Jan 02 13:49:44 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Jan 02 13:49:44 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 02 13:49:45 2013 LZO compression initialized
Wed Jan 02 13:49:45 2013 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jan 02 13:49:45 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 02 13:49:45 2013 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 02 13:49:45 2013 Local Options hash (VER=V4): '41690919'
Wed Jan 02 13:49:45 2013 Expected Remote Options hash (VER=V4): '530fdded'
Wed Jan 02 13:49:45 2013 UDPv4 link local: [undef]
Wed Jan 02 13:49:45 2013 UDPv4 link remote: 98.198.43.49:1194
Wed Jan 02 13:49:45 2013 TLS: Initial packet from 98.198.43.49:1194, sid=2ff352fc 0cec1a87
Wed Jan 02 13:49:45 2013 VERIFY OK: depth=1, /C=US/ST=TX/L=Houston/O=Bui_Coligado/OU=Office/CN=Server_2008/name=Edwin_Coligado/emailAddress=tamducbui@gmail.com
Wed Jan 02 13:49:45 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 02 13:49:45 2013 VERIFY OK: depth=0, /C=US/ST=TX/L=Houston/O=Bui_Coligado/OU=Office/CN=server/name=Edwin_Coligado/emailAddress=tamducbui@gmail.com
Wed Jan 02 13:50:45 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Jan 02 13:50:45 2013 TLS Error: TLS handshake failed
Wed Jan 02 13:50:45 2013 TCP/UDP: Closing socket
Wed Jan 02 13:50:45 2013 SIGUSR1[soft,tls-error] received, process restarting
Wed Jan 02 13:50:45 2013 Restart pause, 2 second(s)
Wed Jan 02 13:50:47 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 02 13:50:47 2013 Re-using SSL/TLS context
Wed Jan 02 13:50:47 2013 LZO compression initialized
Wed Jan 02 13:50:47 2013 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jan 02 13:50:47 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 02 13:50:47 2013 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 02 13:50:47 2013 Local Options hash (VER=V4): '41690919'
Wed Jan 02 13:50:47 2013 Expected Remote Options hash (VER=V4): '530fdded'
Wed Jan 02 13:50:47 2013 UDPv4 link local: [undef]
Wed Jan 02 13:50:47 2013 UDPv4 link remote: 98.198.43.49:1194
Wed Jan 02 13:50:47 2013 TLS: Initial packet from 98.198.43.49:1194, sid=c59010b8 18a8a4a6
Wed Jan 02 13:50:47 2013 VERIFY OK: depth=1, /C=US/ST=TX/L=Houston/O=Bui_Coligado/OU=Office/CN=Server_2008/name=Edwin_Coligado/emailAddress=tamducbui@gmail.com
Wed Jan 02 13:50:47 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 02 13:50:47 2013 VERIFY OK: depth=0, /C=US/ST=TX/L=Houston/O=Bui_Coligado/OU=Office/CN=server/name=Edwin_Coligado/emailAddress=tamducbui@gmail.com
Wed Jan 02 13:50:52 2013 TCP/UDP: Closing socket
Wed Jan 02 13:50:52 2013 SIGTERM[hard,] received, process exiting