I am attempting to configure an OpenVPN server installation on my home router, with the intent of tunneling my remote traffic through it.
The server is up and running and I can connect to it from my laptop on a remote connection, but I cannot ping any remote resources, such as the VPN server, or my home LAN.
The server CAN, however, ping the client.
HomeLAN: 192.168.2.0
Client connects to VPN and acquires address of 10.8.0.6.
server.conf
port 1194
proto tcp-server
dev tun
ca /opt/etc/openvpn/ca.crt
cert /opt/etc/openvpn/server.crt
key /opt/etc/openvpn/server.key # This file should be kept secret
dh /opt/etc/openvpn/dh.pem
server 10.8.0.0 255.255.255.0
client-to-client
keepalive 10 120
persist-key
persist-tun
status /opt/var/log/openvpn/status.log
log-append /opt/var/log/openvpn/openvpn.log
verb 4
client.conf
client
dev tun
proto tcp
remote remote.host.name 1194
nobind
persist-key
persist-tun
resolv-retry infinite
ns-cert-type server
float
ca "C:\\Path\\to\\certs\\ca.crt"
cert "C:\\Path\\to\\certs\\tyltw8.crt"
key "C:\\Path\\to\\certs\\tyltw8.key"
verb 4
route-method exe
route-delay 2
Server Routing Table
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
71.123.xxx.x * 255.255.255.255 UH 0 0 0 vlan2
10.8.0.2 * 255.255.255.255 UH 0 0 0 tun1
71.123.xxx.x * 255.255.255.0 U 0 0 0 vlan2
192.168.2.0 * 255.255.255.0 U 0 0 0 br0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun1
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default hostname 0.0.0.0 UG 0 0 0 vlan2
Client Routing Table post connection
===========================================================================
Interface List
23...00 ff a8 e7 87 de ......TAP-Windows Adapter V9
21...00 ff 56 e9 a5 c0 ......TeamViewer VPN Adapter
19...88 53 2e 0a fe 84 ......Microsoft Hosted Network Virtual Adapter
16...88 53 2e 0a fe 87 ......Bluetooth Device (Personal Area Network)
12...14 fe b5 a3 cf cf ......Realtek PCIe GBE Family Controller
13...88 53 2e 0a fe 83 ......Intel(R) Centrino(R) Advanced-N 6230
1...........................Software Loopback Interface 1
14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.192.230.1 10.192.230.101 10
0.0.0.0 128.0.0.0 192.168.2.254 10.8.0.6 31
10.8.0.0 255.255.255.0 10.8.0.5 10.8.0.6 31
10.8.0.4 255.255.255.252 On-link 10.8.0.6 286
10.8.0.6 255.255.255.255 On-link 10.8.0.6 286
10.8.0.7 255.255.255.255 On-link 10.8.0.6 286
10.192.230.0 255.255.255.0 On-link 10.192.230.101 266
10.192.230.101 255.255.255.255 On-link 10.192.230.101 266
10.192.230.255 255.255.255.255 On-link 10.192.230.101 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
128.0.0.0 128.0.0.0 192.168.2.254 10.8.0.6 31
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.8.0.6 286
224.0.0.0 240.0.0.0 On-link 10.192.230.101 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.8.0.6 286
255.255.255.255 255.255.255.255 On-link 10.192.230.101 266
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
23 286 fe80::/64 On-link
12 266 fe80::/64 On-link
23 286 fe80::209a:a959:8141:34af/128
On-link
12 266 fe80::70a6:9d04:7378:206/128
On-link
1 306 ff00::/8 On-link
23 286 ff00::/8 On-link
12 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
Current iptables dump
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:1194
DROP all -- anywhere anywhere state INVALID
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
ACCEPT tcp -- anywhere anywhere tcp dpt:9998
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
logdrop all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere state INVALID
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
wanin all -- anywhere anywhere
wanout all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
upnp all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain logdrop (1 references)
target prot opt source destination
LOG all -- anywhere anywhere state NEW limit: avg 1/sec burst 5 LOG level warning tcp-sequence tcp-options ip-options macdecode prefix `DROP '
DROP all -- anywhere anywhere
Chain logreject (0 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning tcp-sequence tcp-options ip-options macdecode prefix `REJECT '
REJECT tcp -- anywhere anywhere reject-with tcp-reset
Chain upnp (1 references)
target prot opt source destination
Chain wanin (1 references)
target prot opt source destination
Chain wanout (1 references)
target prot opt source destination
This could be related to routing, and it could be related to iptables on my router/server. I am unsure, as I don't have a lot of experience in this area.
