Hello everyone!
I with couple of friends installed OpenVPN to play certain games through LAN. Friends with Win7/Win8 and i with ArchLinux 3.11.4-1 x86_64. I have external IP so im a server. Here
server config:
local xxxx.no-ip.org
# internal ip
ifconfig 10.8.0.2 255.255.255.0
# as debbie10t mentioned 10.8.0.1 must be gateway
server-bridge 10.8.0.1 255.255.255.0 10.8.0.4 10.8.0.14
port 1194
proto udp
dev tap0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh2048.pem
tls-auth /etc/openvpn/ta.key 0
cipher BF-CBC
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
max-clients 10
user nobody
group nobody
persist-key
persist-tun
verb 3
For
clients we use next config:
client
proto udp
dev tap
dev-node "tap0"
remote xxxx.no-ip.org 1194
resolv-retry infinite
nobind
ca "C:\\Program Files\\OpenVPN\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\client.crt" # all certeficates generated individually
key "C:\\Program Files\\OpenVPN\\client.key"
tls-auth "C:\\Program Files\\OpenVPN\\ta.key" 1
cipher BF-CBC
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 3
We can connect to server and receive our ips, also we can ping each other, all fine. But when someone creating game, we dont see it. And there is no error =\. Their firewalls are off. Here is my
iptables rules:
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i tap0 -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -p udp -m conntrack --ctstate NEW -j UDP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j TCP
-A INPUT -p tcp -m recent --set --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
-A INPUT -p udp -m recent --set --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
-A INPUT -j REJECT --reject-with icmp-proto-unreachable
-A TCP -p tcp -m recent --update --seconds 60 --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
-A TCP -p tcp -m tcp --dport 1194 -j ACCEPT
-A UDP -p udp -m recent --update --seconds 60 --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
-A UDP -p udp -m udp --dport 1194 -j ACCEPT
Routes:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default x-yyy-zzz-254-b 0.0.0.0 UG 202 0 0 enp2s0
x.yyy.zzz.0 * 255.255.255.0 U 0 0 0 enp2s0
x.yyy.zzz.0 * 255.255.255.0 U 202 0 0 enp2s0
x-yyy-zzz-28-br localhost.local 255.255.255.255 UGH 202 0 0 lo
10.8.0.0 * 255.255.255.0 U 0 0 0 tap0
Even when i switch off iptables, they dont see my created game. I reviewed alot of internet resources and find out that it might be UDP broadcast failure. I also tried many different configs. Still have no clue how to make it work. Could someone help me with our issue? It would be great :3
P.S.: if there is something wrong with my english, sorry. Doing my best, but english is foreign to me.
