hey guys,
I've been googleing around for a few days now and everything i've read tells me this should work, but of course it doesn't I've also read and understand the importance of not using the 192.168.1.0 subnet. It's already in place, after i figure this out ill change it. so my setup is the above subnet with a linux 11.04 box on it with openvpn running. i can connect from outside the wan but when all traffic is routed through the vpn it doesnt work, and of course lan access from the client doesnt work either.
heres the server config
local 192.168.1.15
port 1194
proto udp
dev tun
ca ca.crt
cert lamp.crt
key lamp.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
;client-config-dir ccd
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
mute 20
client config
client
dev tun
proto udp
remote vpn ***.***.***.***
resolv-retry 2
nobind
persist-key
persist-tun
ns-cert-type server
cipher bf-cbc
lzo
verb 3
mute 20
ca ca.crt
cert client.crt
key client.key
sysctl.conf
net.ipv4.ip_forward=1
iptables-sav
Generated by iptables-save v1.4.10 on Mon May 6 21:02:37 2013
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1037:120169]
-A INPUT -i tun+ -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A FORWARD -i tun+ -o eht0 -j ACCEPT
COMMIT
# Completed on Mon May 6 21:02:37 2013
# Generated by iptables-save v1.4.10 on Mon May 6 21:02:37 2013
*nat
:PREROUTING ACCEPT [1176:74170]
:INPUT ACCEPT [252:36970]
:OUTPUT ACCEPT [5:314]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o eth0 -j MASQUERADE
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
-A POSTROUTING -s 10.8.0.0/24 -d 192.168.1.0/24 -j MASQUERADE
COMMIT
# Completed on Mon May 6 21:02:37 2013
iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
MASQUERADE all -- 10.8.0.0/24 anywhere
MASQUERADE all -- 10.8.0.0/24 192.168.1.0/24
finally i have a route in my actiontec router
des 10.8.0.0 gw 192.168.1.15 msk /24 metric 0 status applied
any insight would be apreciated
