Hello All,
I've been racking my brain for the past 6 hours trying to get this to work but i can't seem to route to the internet. I can access all the machines in the vpn servers LAN, but can't reach the internet.
Yes, ip forwarding is enabled.
What I can do:
-----------------
Access entire LAN
What I can't do:
-----------------
Route to the internet
OS: FreeBSD 9.1-RELEASE
FW: ipfw
FW Rules:
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00400 deny ip from any to ::1
00500 deny ip from ::1 to any
00600 allow ipv6-icmp from :: to ff02::/16
00700 allow ipv6-icmp from fe80::/10 to fe80::/10
00800 allow ipv6-icmp from fe80::/10 to ff02::/16
00900 allow ipv6-icmp from any to any ip6 icmp6types 1
01000 allow ipv6-icmp from any to any ip6 icmp6types 2,135,136
65000 allow ip from any to any
65100 divert 8668 ip from any to any via fxp0
65535 deny ip from any to any
Here is my server config:
local 172.16.0.8
port 1194
proto udp
dev tun
ca /usr/local/etc/openvpn/keys/ca.crt
cert /usr/local/etc/openvpn/keys/server.crt
key /usr/local/etc/openvpn/keys/server.key
dh /usr/local/etc/openvpn/keys/dh1024.pem
ifconfig-pool-persist ipp.txt
server 10.1.1.0 255.255.255.0
push "route 172.16.0.0 255.255.0.0"
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
duplicate-cn
log /var/log/openvpn.log
log-append /var/log/openvpn.log
Here is my client config
client
dev tun
proto udp
remote X.X.X.X 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert exodus.crt
key exodus.key
ns-cert-type server
comp-lzo
verb 4
