Hello guys!
I've installed OpenVPN server on a VDS and two clients: one on my Android phone and one on my home computer running win7 64. VPN on the phone works fine, but when I establish a connection from the desktop, I can't open any webpages. What confuses me most is - I can access the webhosts via telnet 80, I get a response when I ping them (using any packet length), but they don't open in any browser (neither using domain name nor IP address). I've already tried disabling firewall and antivirus, it doesn't help. Take a look please. I'd appreciate any help from you.
Client config
remote 213.211.150.167 1127
client
dev tun
ping 10
comp-lzo
proto udp
tls-client
remote-cert-tls server
pkcs12 vpn.windows_tls.p12
verb 3
pull
tls-auth ta.key 1
Server config
local 213.211.150.167
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
tls-auth ta.key 0
port 1127
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert server.crt
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
comp-lzo
;max-clients 100
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
;log-append openvpn.log
verb 9
;mute 20
Connect log:
c:\Program Files\OpenVPN\config>"c:\Program Files\OpenVPN\bin\openvpn.exe" --config "c:\Program Files\OpenVPN\config\myconf.ovpn"
Wed Aug 21 00:46:01 2013 OpenVPN 2.3_beta1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Sep 21 2012
Wed Aug 21 00:46:01 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Aug 21 00:46:05 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Aug 21 00:46:05 2013 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Aug 21 00:46:05 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 21 00:46:05 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 21 00:46:05 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Aug 21 00:46:05 2013 UDPv4 link local (bound): [undef]
Wed Aug 21 00:46:05 2013 UDPv4 link remote: [AF_INET]213.211.150.167:1127
Wed Aug 21 00:46:05 2013 TLS: Initial packet from [AF_INET]213.211.150.167:1127, sid=ade1fe4e 68fc7f48
Wed Aug 21 00:46:05 2013 VERIFY OK: depth=1, C=RU, ST=RU, L=Moscow, O=Myorg, CN=Myorg CA, emailAddress=me@myhost.mydomain
Wed Aug 21 00:46:05 2013 Validating certificate key usage
Wed Aug 21 00:46:05 2013 ++ Certificate has key usage 00a0, expects 00a0
Wed Aug 21 00:46:05 2013 VERIFY KU OK
Wed Aug 21 00:46:05 2013 Validating certificate extended key usage
Wed Aug 21 00:46:05 2013 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Aug 21 00:46:05 2013 VERIFY EKU OK
Wed Aug 21 00:46:05 2013 VERIFY OK: depth=0, C=RU, ST=RU, L=Moscow, O=Myorg, CN=server, emailAddress=me@myhost.mydomain
Wed Aug 21 00:46:05 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Aug 21 00:46:05 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 21 00:46:05 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Aug 21 00:46:05 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 21 00:46:05 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Aug 21 00:46:05 2013 [server] Peer Connection Initiated with [AF_INET]213.211.150.167:1127
Wed Aug 21 00:46:08 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Aug 21 00:46:08 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13'
Wed Aug 21 00:46:08 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Aug 21 00:46:08 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Aug 21 00:46:08 2013 OPTIONS IMPORT: route options modified
Wed Aug 21 00:46:08 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Aug 21 00:46:08 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Aug 21 00:46:08 2013 open_tun, tt->ipv6=0
Wed Aug 21 00:46:08 2013 TAP-WIN32 device [Подключение по локальной сети 3] opened: \\.\Global\{63EAE8F7-39E0-404F-B683-11AF9E08EB23}.tap
Wed Aug 21 00:46:08 2013 TAP-Windows Driver Version 9.9
Wed Aug 21 00:46:08 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.14/255.255.255.252 on interface {63EAE8F7-39E0-404F-B683-11AF9E08EB23} [DHCP-serv: 10.8.0.13, lease-time: 31536000]
Wed Aug 21 00:46:08 2013 Successful ARP Flush on interface [16] {63EAE8F7-39E0-404F-B683-11AF9E08EB23}
Wed Aug 21 00:46:13 2013 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Wed Aug 21 00:46:13 2013 Route: Waiting for TUN/TAP interface to come up...
Wed Aug 21 00:46:18 2013 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Aug 21 00:46:18 2013 C:\Windows\system32\route.exe ADD 213.211.150.167 MASK 255.255.255.255 192.168.1.1
Wed Aug 21 00:46:18 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Aug 21 00:46:18 2013 Route addition via IPAPI succeeded [adaptive]
Wed Aug 21 00:46:18 2013 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.13
Wed Aug 21 00:46:18 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Aug 21 00:46:18 2013 Route addition via IPAPI succeeded [adaptive]
Wed Aug 21 00:46:18 2013 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.13
Wed Aug 21 00:46:18 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Aug 21 00:46:18 2013 Route addition via IPAPI succeeded [adaptive]
Wed Aug 21 00:46:18 2013 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.13
Wed Aug 21 00:46:18 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Aug 21 00:46:18 2013 Route addition via IPAPI succeeded [adaptive]
Wed Aug 21 00:46:18 2013 Initialization Sequence Completed
