Hai, I'm new to OpenVPN and recently finished setup my VPN using OpenVPN.
I have problems that client can ping the server and other clients, but the server cant ping clients.
So:
Client <--> Client = Works
Client --> Server = Works
Server --> Client = Doesnt work
My Server.conf
port 443
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt # generated keys
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key # keep secret
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.9.8.0 255.255.255.0 # internal tun0 connection IP
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo # Compression - must be turned on at both end
persist-key
persist-tun
status log/openvpn-status.log
verb 3 # verbose mode
client-to-client
client-config-dir ccd
My Client.conf
client
dev tun
port 443
proto udp
remote 199.xxx.xxx.xxx 443 # VPN server IP : PORT
nobind
ca /etc/openvpn/ca.crt
cert /etc/openvpn/rpi.crt
key /etc/openvpn/rpi.key
comp-lzo
persist-key
persist-tun
verb 3
Server iptables
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- 10.9.8.0/24 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Client iptables (from one of the clients)
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- 192.168.1.0/24 anywhere
DROP all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Helps really appreciated. 🙂
If you need me to log something, I will provide it. Just tell me how to do it. 🙂
