Configs here: https://forums.openvpn.net/topic12315.html. The tunnel works, but from the server, 46.21.99.3, I cannot ping the client 46.21.99.5. Ping reports destination unreachable. If I disable the firewall the problem persists. What have I missed?

hi there, [quote]The tunnel works[/quote] ok... [quote]but from the server, 46.21.99.3, I cannot ping the client 46.21.99.5[/quote] can you please explain what do you mean when saying " the tunnel works" ? can you ping the server from your client? Michael.

I can ping the server. Traffic flows through the tunnel and returns, but the server cannot contact the client.

check firewall on client check if firewall on server filters traffic destined to your clients (not likely though) Michael.

If I clear iptables on both the server and the client the problem persists.

use wireshark then to both client/server to capture trafiic and see whats going on.. Michael.

A tcpdump on both sides shows only ARP requests. [code] 10:04:36.532637 ARP, Request who-has 46.21.99.5 tell 46.21.99.3, length 28 [/code]

Additional observations. The ping returns unreachable instantly. There are no long delays that would suggest packet drops.

hi there, [quote]A tcpdump on both sides shows only ARP requests.[/quote] you mean you are pinging the vpn side and wireshark doesnt show a thing?!?!?! :shock: Michael.

Server:[code] root@mercury:~# ping -c 5 46.21.99.5 PING 46.21.99.5 (46.21.99.5) 56(84) bytes of data. From 46.21.99.3 icmp_seq=2 Destination Host Unreachable From 46.21.99.3 icmp_seq=3 Destination Host Unreachable From 46.21.99.3 icmp_seq=4 Destination Host Unreachable From 46.21.99.3 icmp_seq=5 Destination Host Unreachable --- 46.21.99.5 ping statistics --- 5 packets transmitted, 0 received, +4 errors, 100% packet loss, time 4000ms pipe 3 [/code] Client:[code] # tcpdump -i tap0 -nn host 46.21.99.3 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on tap0, link-type EN10MB (Ethernet), capture size 65535 bytes 10:35:02.135970 ARP, Request who-has 46.21.99.5 tell 46.21.99.3, length 28 10:35:03.136155 ARP, Request who-has 46.21.99.5 tell 46.21.99.3, length 28 10:35:04.136165 ARP, Request who-has 46.21.99.5 tell 46.21.99.3, length 28 10:35:06.136123 ARP, Request who-has 46.21.99.5 tell 46.21.99.3, length 28 10:35:07.136108 ARP, Request who-has 46.21.99.5 tell 46.21.99.3, length 28 10:35:08.137229 ARP, Request who-has 46.21.99.5 tell 46.21.99.3, length 28 [/code]

can you post the output of ifconfig on your openvpn server? also post the contents of brctl show Michael.

Bridged server cannot ping client

adi3000

I noticed that a few weeks ago, Seems that it may have been some windows 7 upgrade with modify the lan rules (i.e traffic on private subnet)

For me as I set up a family private VPN, I just trust every one and lunch on some windows 7 client this command (if you work with with the Windows default firewall):

netsh.exe advfirewall firewall add rule name="OPENVPN-IN" action=ALLOW dir=IN remoteip=192.168.26.0/24

with

192.168.26.0/24

symbolizing my VPN network

BE CAREFULL : This command allow all traffic between two client of the subnet (it doesn't impact rules which applies to WAN)

To summup, I just reajust my firewall rules. I don't properly remember how we do that by mouse, but google may find it for you.

« Previous Page