Hi all,
appreciate any hints on how to troubleshoot this routing issue
- Went through
https://forums.openvpn.net/topic12532.html
- VPN connection from Win7(client) to CentOS 6 (server) can be established,
- tracert from win7 results into 'host unreachable':
C:\>tracert www.cnn.com
Traza a la dirección cnn-lax-tmp.gslb.vgtf.net [157.166.241.11]
sobre un máximo de 30 saltos:
1 330 ms 89 ms 86 ms 10.8.0.1
2 10.8.0.1 informes: Host de destino inaccesible.
Traza completa.
iptables are set up as follows:
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [657:67874]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2990 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 59267 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -p tcp -m tcp --dport 50084 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Sun Sep 15 11:40:20 2013
# Generated by iptables-save v1.4.7 on Sun Sep 15 11:40:20 2013
*nat
:PREROUTING ACCEPT [3:138]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A PREROUTING -p tcp -m tcp --dport 50084 -j DNAT --to-destination 0.0.0.0:50084
-A POSTROUTING -j MASQUERADE
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
Given my humble knowledge in the field of networking/iptables I would assume that the issue is likely related to PRE/POSTROUTING rules. Am I on the right path here?
If so, any hints what to do next to troubleshoot this issue are highly welcome.
Tx!
