please post the output of:
iptables -L -t nat
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
My server.conf is as follows:
port 1195
proto udp
dev tun
ca easy-rsa/2.0/keys/ca.crt
cert easy-rsa/2.0/keys/server.crt
key easy-rsa/2.0/keys/server.key
topology subnet
server 10.9.0.0 255.255.0.0
push "route 10.44.44.0 255.255.255.0"
Client conf is as follows (I removed the IP address we're connecting to for security, but A.B.C.D would be replaced with the external IP of the VPN server):
client
dev tun
proto udp
remote A.B.C.D 1195
nobind
persist-key
persist-tun
ca ..\\keys\\saas\\ca.crt
cert ..\\keys\\texada.crt
key ..\\keys\\texada.key
ns-cert-type server
comp-lzo
verb 3
I have the following in iptables:
*nat
: PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
: POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o eth2 -j MASQUERADE
-A POSTROUTING -o tun+ -j MASQUERADE
COMMIT
A little more background info:
The VPN server has it's own external IP address, but sits behind a firewall that stops all traffic except the VPN connections on port 1195.
I'm beginning to think I might need to make a change to the iptables rules, but not sure what exactly. I do have net.ipv4.ip_forward = 1 in sysctl.conf. Thanks again for any help.
