Hi Michael,
remove the NAT rule from your openvpn server then,
Done
is ip forwarding enabled on openvpn server?
Yes
root@Deb764opVPN:~# cat /proc/sys/net/ipv4/ip_forward
1
can you ping 10.8.0.1 from 5.9.173.251?
No
root@Deb764zab2:~# ping 10.8.0.1
PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
^C
--- 10.8.0.1 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 4009ms
can you ping 5.9.173.250 from your pi?
Yes
zabbix@Pi / $ ping 5.9.173.250
PING 5.9.173.250 (5.9.173.250) 56(84) bytes of data.
64 bytes from 5.9.173.250: icmp_req=1 ttl=51 time=78.9 ms
64 bytes from 5.9.173.250: icmp_req=2 ttl=51 time=264 ms
64 bytes from 5.9.173.250: icmp_req=3 ttl=51 time=86.6 ms
^C
--- 5.9.173.250 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 78.904/143.288/264.305/85.631 ms
if you do a traceroute from 5.9.173.251 to 10.8.0.5 what it shows?
root@Deb764zab2:~# traceroute 10.8.0.5
traceroute to 10.8.0.5 (10.8.0.5), 30 hops max, 60 byte packets
1 static.47.85.9.5.clients.your-server.de (5.9.85.47) 0.048 ms 0.016 ms 0.013 ms
2 hos-tr4-juniper4.rz16.hetzner.de (213.239.233.97) 0.152 ms hos-tr2-juniper3.rz16.hetzner.de (213.239.230.33) 0.142 ms hos-tr3-juniper4.rz16.hetzner.de (213.239.233.65) 0.170 ms
3 core21.hetzner.de (213.239.245.105) 0.344 ms core22.hetzner.de (213.239.245.145) 0.212 ms core21.hetzner.de (213.239.245.105) 0.285 ms
4 core12.hetzner.de (213.239.245.29) 2.780 ms 2.784 ms 2.764 ms
5 core11.hetzner.de (213.239.245.21) 2.840 ms core4.hetzner.de (213.239.245.10) 4.829 ms core11.hetzner.de (213.239.245.21) 2.825 ms
6 core11.hetzner.de (213.239.245.18) 5.433 ms 5.449 ms *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *^C
also what subnet mask do you use on debian's?
/29
From my routing days it appears to me that the OpenVZ Host / Venet L3 router/switch does not know where to send packets dest for 10.8.x.x networks therefore I added a route on Deb764 (OpenVZ Host):
ip route add 10.8.0.0/16 via 5.9.173.250 dev venet0
When I traceroute from Deb764zab2 with this route added I then get:
root@Deb764zab2:~# traceroute 10.8.0.5
traceroute to 10.8.0.5 (10.8.0.5), 30 hops max, 60 byte packets
1 static.47.85.9.5.clients.your-server.de (5.9.85.47) 0.046 ms 0.028 ms 0.019 ms
2 * * *
3 * * *
4 * * *
5 * * *
6 * * *
7 *^C
It appears to stop at Deb764 rather than going out on to Hetzners Network which is half way to what I need but as per tcpdumps doesn`t appear to get routed to .250 (OpenVPN Server).
I can ping fine from .251 to .250
root@Deb764zab2:~# ping 5.9.173.250
PING 5.9.173.250 (5.9.173.250) 56(84) bytes of data.
64 bytes from 5.9.173.250: icmp_req=1 ttl=64 time=0.084 ms
64 bytes from 5.9.173.250: icmp_req=2 ttl=64 time=0.039 ms
64 bytes from 5.9.173.250: icmp_req=3 ttl=64 time=0.070 ms
^C
--- 5.9.173.250 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2000ms
rtt min/avg/max/mdev = 0.039/0.064/0.084/0.019 ms
Any Ideas?
Regards
Aidan
