I am trying to use my VPN so I can use the internet connection as my own. So far I've got the VPN up and running and I can connect to it just fine. The issue is that it doesn't seem to be pushing the DNS properly. I've read a few threads on this forum and some of the example configs for doing so but I've come up with nothing, any help would be appreciated. Client.opvn [code]client pull dev tun ;dev-node {TUN/TAP Name} proto udp nobind remote 74.91.115.193 1194 route-method exe resolv-retry infinite pull ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files (x86)\\OpenVPN\\config\\client.crt" key "C:\\Program Files (x86)\\OpenVPN\\config\\client.key" tls-auth "C:\\Program Files (x86)\\OpenVPN\\config\\ta.key" 1 comp-lzo ns-cert-type server verb 3 [/code] server.opvn [code]local 74.91.115.193 port 1194 proto udp dev tun ;dev-node {TUN/TAP Name} server 10.0.0.0 255.255.255.248 route-method exe ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files (x86)\\OpenVPN\\config\\testsrv.crt" key "C:\\Program Files (x86)\\OpenVPN\\config\\testsrv.key" dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem" tls-auth "C:\\Program Files (x86)\\OpenVPN\\config\\ta.key" 0 comp-lzo keepalive 20 60 status TEST_TUN.log push "redirect-gateway def1" push "dhcp-option DNS 8.8.8.8" ;push "route-gateway dhcp" verb 3 [/code] Server log http://pastebin.com/QJwr8FJ3 Client log http://pastebin.com/1DvWFHmF After I connect to it some things work. Such as I can use Steam and RDP but loading Google and other webpages doesn't work.

As an update. Ipconfig/all shows everything as being picked up correctly. [img]http://i.imgur.com/BgDAXqa.png[/img]

Network is bridged and all seems to be working fine. As per your second link(http://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html) I am a little confused on what I need to set this to [code]server-bridge 192.168.8.4 255.255.255.0 192.168.8.128 192.168.8.254[/code] If I set the TCP/IP on the adapter to what is mentioned in the manual I'll lose internet on my VDS. So I imagine I need to edit the above line to match what is current set on my adapter but I am little unsure.

Forcing client side traffic to go through the VPN

kraze

I am trying to use my VPN so I can use the internet connection as my own. So far I've got the VPN up and running and I can connect to it just fine. The issue is that it doesn't seem to be pushing the DNS properly. I've read a few threads on this forum and some of the example configs for doing so but I've come up with nothing, any help would be appreciated.

Client.opvn

client
pull
dev tun
;dev-node {TUN/TAP Name}
proto udp
nobind
remote 74.91.115.193 1194
route-method exe
resolv-retry infinite
pull
       ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
     cert "C:\\Program Files (x86)\\OpenVPN\\config\\client.crt"
      key "C:\\Program Files (x86)\\OpenVPN\\config\\client.key"
 tls-auth "C:\\Program Files (x86)\\OpenVPN\\config\\ta.key" 1
comp-lzo
ns-cert-type server
verb 3

server.opvn

local 74.91.115.193
port 1194
proto udp
dev tun
;dev-node {TUN/TAP Name}
server 10.0.0.0 255.255.255.248
route-method exe
         ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
       cert "C:\\Program Files (x86)\\OpenVPN\\config\\testsrv.crt"
        key "C:\\Program Files (x86)\\OpenVPN\\config\\testsrv.key"
         dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"
   tls-auth "C:\\Program Files (x86)\\OpenVPN\\config\\ta.key" 0
comp-lzo
keepalive 20 60
status TEST_TUN.log
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
;push "route-gateway dhcp"
verb 3

Server log
http://pastebin.com/QJwr8FJ3
Client log
http://pastebin.com/1DvWFHmF

After I connect to it some things work. Such as I can use Steam and RDP but loading Google and other webpages doesn't work.

kraze

As an update. Ipconfig/all shows everything as being picked up correctly.

kraze

I read through the manual there and from what I get from the first link is I need to place "push "route 10.66.0.0 255.255.255.0"" in my server config but change it to match the current subnet and netmask I have listed there, which is " Server 10.0.0.0 255.255.255.248".

As for your second link, are you suggesting that I switch to using dev tap and bridge the adapters?

kraze

I likely just misunderstood what you were saying from the first link. I figured since you sent it to me I was missing something in my config and that link had the answer.

Yes .. at least for testing .. then you can learn why these configs are not suitable for --mode tun but they are suitable for --mode tap --server-bridge

I went ahead and switched the server and client from tun to tap and that allows me to load everything just fine, I am still working on bridging the connection on the server, though. I will report back when that's finished.

kraze

Somehow I managed to break it, shocker I know... After making the change from tun to tap everything was loading just fine and suddenly it just stopped. I can still connect to the VPN just fine but it's not loading pages anymore as it was when I made the change from tun to tap. I've spent some time trying to figure out where I went wrong.

Server
http://pastebin.com/0K9Wq2s5
Client
http://pastebin.com/N3KGRD7A

Server log
http://pastebin.com/hktALQNj
Client log
http://pastebin.com/6vVJU9kd

kraze

Forgive me for these extra replies. I spent some time looking over my changes and it appears I made a typo in my dev-node name and it caused issues. I fixed that up and got things loading again.

Still trying to bridge the connection. Windows is telling me I need to disable RRAS to bridge the connection but that service isn't even installed on my server, so I'll need to spend some time tracking that down.

kraze

Network is bridged and all seems to be working fine. As per your second link(http://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html) I am a little confused on what I need to set this to

server-bridge 192.168.8.4 255.255.255.0 192.168.8.128 192.168.8.254

If I set the TCP/IP on the adapter to what is mentioned in the manual I'll lose internet on my VDS. So I imagine I need to edit the above line to match what is current set on my adapter but I am little unsure.

kraze

Went ahead and set the above variable to this.

server-bridge 74.91.115.193 255.255.255.0 74.91.115.193 74.91.115.193

Seems to be work fine. Server and client connect right up and my client is assigned the servers IP. However, when viewing my IP it still shows as my standard external IP and not my VPN's. I keep going through the manual thinking I missed something but I can't find anything.

Configs haven't changed besides the one line I posted above. Here are the logs just in-case they're needed.

Server
http://pastebin.com/NrFwKnRZ
Client
http://pastebin.com/mxBFaxta

Interesting thing to note is when I run a traceroute while connected to the VPN to my server IP, it shows the end point as being me. Not sure if that is normal or not.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Jordan>tracert 74.91.115.193

Tracing route to Jordan-PC [74.91.115.193]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.1.1
  2    10 ms    12 ms     8 ms  96.188.38.1
  3     9 ms     7 ms     8 ms  te-9-2-ur01.placerville.ca.ccal.comcast.net [68.85.104.5]

  4    40 ms     9 ms    11 ms  69.139.222.61
  5    15 ms    14 ms    17 ms  pos-0-4-0-0-cr01.sacramento.ca.ibone.comcast.net [68.86.90
.21]
  6    17 ms    20 ms    16 ms  pos-0-7-0-0-pe01.529bryant.ca.ibone.comcast.net [68.86.88.
202]
  7    61 ms    62 ms    62 ms  te0-0-0-0.ccr21.sjc04.atlas.cogentco.com [154.54.11.13]
  8    52 ms    50 ms    49 ms  be2016.ccr22.sfo01.atlas.cogentco.com [154.54.0.177]
  9    98 ms    90 ms    89 ms  be2133.ccr22.mci01.atlas.cogentco.com [154.54.30.66]
 10   106 ms    98 ms    98 ms  te0-7-0-4.mpd21.ord01.atlas.cogentco.com [154.54.2.234]
 11   100 ms    99 ms   102 ms  be2003.ccr21.ord03.atlas.cogentco.com [154.54.29.22]
 12    73 ms    71 ms    75 ms  38.104.102.102
 13    93 ms    71 ms    72 ms  border5.po2-bbnet2.chg.pnap.net [64.94.32.74]
 14    72 ms    84 ms    75 ms  Jordan-PC [74.91.115.193]

Trace complete.

C:\Users\Jordan>

Other than that I can ping and trace any address just fine.