Dan_I
Hi all- newbie network guy + new to openvpn.
My topology is:
Internet <-> Modem <-> Router <-> Private LAN (OpenVPN server sits here behind router in DMZ [for now])
server.conf:
port 1194
proto udp
dev tun
ca ca.crt
cert reaper.crt
key reaper.key
tls-auth ta.key 0
dh dh1024.pem
server 10.8.8.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.105.66.0 255.255.255.0"
push "dhcp-option DNS 10.105.66.115"
client-to-client
keepalive 10 120
comp-lzo
max-clients 5
user nobody
group nogroup
persist-key
persist-tun
log openvpn.log
log-append openvpn.log
verb 5
mute 20
Now- I'm not necessarily complaining about this, but I can successfully connect, ping, and SSH to all devices on my private LAN subnet. My question is- I did the "push route" thing in the server.conf but did NOT set a static route back to [10.8.8.0/] the OpenVPN server on my router (to act as gateway). So, exactly how is traffic getting back to me? From everything I've read, outbound packets from inside the private subnet that are addressed to a VPN client should be get lost to the public net.
The VPN server (and the other servers on my network) are all virtualized.
Thanks guys, just want to make sure I don't have a gaping security hole somewhere...
janjust
depends on your router's iptables rules. Are you using masquerading?
if you want to make sure, run 'tcpdump -nnel -i eth0' on the server and access something on the server-side LAN; you will see the IP packets of the traffic.
