gcmartin3
I've poured through the internet and browsed this forum, but can't figure this out.
I have a 64-bit centos 5.9 VM and have the latest openvpn installed and configured on it. Have followed several how-to's several times but seem to be stuck on the same problem. Although, I can connect, I can't access any web sites.
The openvpn has a public IP and is hosted in a datacenter. My client is OpenVPN Connect (on Apple iPad). I can connect the client fine. I have an SSH app on the iPad and when I SSH to a server, it shows the correct IP of my openVPN server. I can also ping the iPad when I'm connected.
I've tried many things, all from what I can find on the internet. Have even deleted and recreated the VM many times.
I hope someone can help. I'll really appreciate it.
Here's my server.conf
local x.x.x.x
port 1194
proto udp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 216.86.146.8"
push "dhcp-option DNS 216.86.146.9"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
mute 20
here's my client.ovpn
client
dev tun
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
cert gcmartin3.crt
key gcmartin3.key
auth-user-pass
ns-cert-type server
comp-lzo
verb 3
mute 20
[root@openvpn01 openvpn]# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.8.0.0/24 anywhere
SNAT all -- anywhere anywhere to:x.x.x.x
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
[root@openvpn01 openvpn]# netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
x.x.x.0 0.0.0.0 255.255.255.128 U 0 0 0 eth0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
0.0.0.0 x.x.x.1 0.0.0.0 UG 0 0 0 eth0
[root@openvpn01 openvpn]#
[root@openvpn01 openvpn]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- 10.8.0.0/24 anywhere
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT esp -- anywhere anywhere
ACCEPT ah -- anywhere anywhere
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
ACCEPT udp -- anywhere anywhere udp dpt:ipp
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ndmp
ACCEPT udp -- anywhere anywhere state NEW udp dpt:openvpn
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
[root@openvpn01 openvpn]#
Please let me know if I can provide more info
Thanks in advance
Best regards
Greg
gcmartin3
Dear Debbie10t
Thank you for the response. I have seen these HOWTO and have followed the steps in them already. So I am in need of more specific suggestions.
I have already atttached my client and server configuration settings to the post; so if If I can provide more information for my setup, I would be pleased to.
Thanks again in advance for any help that the forum can provide.
Best regards
Greg
