Hi guys! One week i'm on 0penvpn and still ... fucked up!! :shock: (sorry) Got a VPS server with public adress where Openvpn is installed. VPS is under ubuntu 12.04. There is no fuck... gateway! Just 192.162.69.XX as public adress (no subnet) and a resove.conf with 8.8.8.8 as DNS. Network interface is: lo Loopback 127.0.0.1 255.0.0.0 tun0 Inconnu 10.8.0.1 255.255.255.255 venet0 OpenVZ 127.0.0.2 255.255.255.255 venet0:0 OpenVZ (Virtuel) 192.162.69.xx 255.255.255.255 Config is one server with 3 vpn clients ubuntu (subnet behind a dhcp wifi gateway router 192.168.1.xx) I want the VPS push his DNS to the clients but impossible!! I tried all!! VPN clients are connected with succes on the VPS and can work on applis. But my problem is to permit web acces to vpn clients trough the Openvpn server. So Openvpn server 10.8.0.1 can ping 10.8.0.2 client...and client 10.8.0.2 can ping Openvpn server 10.8.0.1... and all adress after the Openvpn server, on the net... BUT clients are not able to resolve any fuck... domain name as google.com. Erreur 137 in chrome when tried to open a web page from the clients Rules on firewall (iptables) seems to be ok: -A INPUT -i tun0 -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -s 127.0.0.1 -j ACCEPT -A INPUT -d 127.0.0.1 -j ACCEPT -A INPUT -p udp -m udp --dport 1194 -j ACCEPT (+tcp 80 & 443, dns 53 udp and tcp, etc....) -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT -A FORWARD -i tun0 -o venet0 -j ACCEPT -A FORWARD -i venet0 -o tun0 -j ACCEPT *nat -A POSTROUTING -s 10.8.0.0/24 -o venet0 -j SNAT --to-source 192.162.69.xx -A OUTPUT -j ACCEPT When vpn client is connected, routing table is : route -n Table de routage IP du noyau Destination Passerelle Genmask Indic Metric Ref Use Iface 0.0.0.0 10.8.0.5 0.0.0.0 UG 0 0 0 tun0 10.8.0.0 10.8.0.5 255.255.255.0 UG 0 0 0 tun0 10.8.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 wlan0 192.162.69.xx 192.168.16.1 255.255.255.255 UGH 0 0 0 wlan0 192.168.16.0 0.0.0.0 255.255.255.0 U 9 0 0 wlan0 nslookup google.com ;; connection timed out; no servers could be reached but ping 8.8.8.8 PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_req=1 ttl=47 time=90.4 ms client.conf is now: client proto udp dev tun ca ca.crt dh dh2048.pem cert vpnjyclaptop.crt key vpnjyclaptop.key remote 192.162.69.xx 1194 tls-auth ta.key 1 cipher AES-128-CBC verb 2 mute 20 keepalive 10 120 comp-lzo persist-key persist-tun resolv-retry infinite nobind And server side is : route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0 0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 venet0 So first problem: i don't see any public ip adress from the server (192.162.69.xx) but no trouble to resolve domain name from the server... nslookup google.com Server: 8.8.8.8 Address: 8.8.8.8#53 Non-authoritative answer: Name: google.com Address: 173.194.40.102 and ping 8.8.8.8 is ok... of course. server.conf is now: port 1194 proto udp dev tun0 ca keys/masterkey/ca.crt cert keys/masterkey/server.crt key keys/masterkey/server.key dh keys/masterkey/dh2048.pem server 10.8.0.0 255.255.255.0 crl-verify keys/masterkey/crl.pem ifconfig-pool-persist servers/vigicallservervpn/logs/ipp.txt tls-auth servers/vigicallservervpn/ta.key 0 cipher AES-128-CBC user nobody group nogroup status servers/vigicallservervpn/logs/openvpn-status.log log-append servers/vigicallservervpn/logs/openvpn.log verb 4 mute 10 max-clients 10 local 192.162.69.xx keepalive 10 120 client-config-dir /etc/openvpn/servers/vigicallservervpn/ccd client-to-client comp-lzo persist-key persist-tun ccd-exclusive push "redirect-gateway def1" (tried to add push "dhcp-options DNS 10.8.0.1") BUT NOTHING HAPPEND WHEN I WANT TO CONNECT THE WEB FROM VPN CLIENTS THROUGH OPENVPN SERVER .... !!!!! It is working only if i take the client gateway 192.168.16.1 and push the route to the server... but this is not what i want. IS THERE A SPECIALIST TO EXPLAIN ME HOW STUPID I AM ? :lol: Really urgent... Thks!!

Need some help... No DNS pushed from the server.

lostintranslation

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

lostintranslation

😃 Solved!!!

when you get a simple config with one Oenvpn server VPS and several vnp clients trough WAN ...just use the right DNS of your provider (not 8.8.8.8 or opendns adress)...without option PUSH "REDIRECT....

INSTEAD, write directly in the server.conf :

push "dhcp-options 'external dns1'
push "dhcp-options 'external dns2'

Hope, this is going to help people who can't access to internet from vpn clients...