OpenVPN Server: can only connect via LAN, not via Internet

tietze111

Hey,
I've set up a openvpn server on my raspberry pi. Now I have the problem that, if I connect to the server via LAN everything works fine but when I try to connect via the internet it doesn't.
My LOG file says:

Fri Nov 29 18:42:42 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Fri Nov 29 18:42:42 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Nov 29 18:42:42 2013 Need hold release from management interface, waiting...
Fri Nov 29 18:42:43 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Nov 29 18:42:43 2013 MANAGEMENT: CMD 'state on'
Fri Nov 29 18:42:43 2013 MANAGEMENT: CMD 'log all on'
Fri Nov 29 18:42:43 2013 MANAGEMENT: CMD 'hold off'
Fri Nov 29 18:42:43 2013 MANAGEMENT: CMD 'hold release'
Fri Nov 29 18:42:43 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Nov 29 18:42:43 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Nov 29 18:42:43 2013 MANAGEMENT: >STATE:1385746963,RESOLVE,,,
Fri Nov 29 18:42:43 2013 UDPv4 link local: [undef]
Fri Nov 29 18:42:43 2013 UDPv4 link remote: [AF_INET]79.207.201.161:1194
Fri Nov 29 18:42:43 2013 MANAGEMENT: >STATE:1385746963,WAIT,,,
Fri Nov 29 18:43:43 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Nov 29 18:43:43 2013 TLS Error: TLS handshake failed
Fri Nov 29 18:43:43 2013 SIGUSR1[soft,tls-error] received, process restarting
Fri Nov 29 18:43:43 2013 MANAGEMENT: >STATE:1385747023,RECONNECTING,tls-error,,
Fri Nov 29 18:43:43 2013 Restart pause, 2 second(s)
Fri Nov 29 18:43:45 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Nov 29 18:43:45 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Nov 29 18:43:45 2013 MANAGEMENT: >STATE:1385747025,RESOLVE,,,
Fri Nov 29 18:43:45 2013 UDPv4 link local: [undef]
Fri Nov 29 18:43:45 2013 UDPv4 link remote: [AF_INET]79.207.201.161:1194
Fri Nov 29 18:43:45 2013 MANAGEMENT: >STATE:1385747025,WAIT,,,
Fri Nov 29 18:44:45 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Nov 29 18:44:45 2013 TLS Error: TLS handshake failed
Fri Nov 29 18:44:45 2013 SIGUSR1[soft,tls-error] received, process restarting
Fri Nov 29 18:44:45 2013 MANAGEMENT: >STATE:1385747085,RECONNECTING,tls-error,,
Fri Nov 29 18:44:45 2013 Restart pause, 2 second(s)
Fri Nov 29 18:44:47 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Nov 29 18:44:47 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Nov 29 18:44:47 2013 MANAGEMENT: >STATE:1385747087,RESOLVE,,,
Fri Nov 29 18:44:47 2013 UDPv4 link local: [undef]
Fri Nov 29 18:44:47 2013 UDPv4 link remote: [AF_INET]79.207.201.161:1194
Fri Nov 29 18:44:47 2013 MANAGEMENT: >STATE:1385747087,WAIT,,,
Fri Nov 29 18:45:47 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Nov 29 18:45:47 2013 TLS Error: TLS handshake failed
Fri Nov 29 18:45:47 2013 SIGUSR1[soft,tls-error] received, process restarting
Fri Nov 29 18:45:47 2013 MANAGEMENT: >STATE:1385747147,RECONNECTING,tls-error,,
Fri Nov 29 18:45:47 2013 Restart pause, 2 second(s)
Fri Nov 29 18:45:49 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Nov 29 18:45:49 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Nov 29 18:45:49 2013 MANAGEMENT: >STATE:1385747149,RESOLVE,,,
Fri Nov 29 18:45:50 2013 UDPv4 link local: [undef]
Fri Nov 29 18:45:50 2013 UDPv4 link remote: [AF_INET]79.207.201.161:1194
Fri Nov 29 18:45:50 2013 MANAGEMENT: >STATE:1385747150,WAIT,,,
Fri Nov 29 18:46:07 2013 SIGTERM[hard,] received, process exiting
Fri Nov 29 18:46:07 2013 MANAGEMENT: >STATE:1385747167,EXITING,SIGTERM,,

But I think that is what it says when it doesn't get a connection.
I've opened the ports 443 TCP 943 TCP and 1194 UDP.
Can you tell me why I can't get a connection when using the internet?

Thank you in advance!

tietze111

Hey, when running netstat -a -n, it says:

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:1723 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 64 192.168.2.104:22 192.168.2.100:24594 ESTABLISHED
udp 0 0 10.8.0.1:123 0.0.0.0:*
udp 0 0 192.168.2.104:123 0.0.0.0:*
udp 0 0 127.0.0.1:123 0.0.0.0:*
udp 0 0 0.0.0.0:123 0.0.0.0:*
udp 0 0 0.0.0.0:1194 0.0.0.0:*
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 2605 /var/run/dbus/system_bus_socket
unix 8 [ ] DGRAM 2534 /dev/log
unix 2 [ ACC ] SEQPACKET LISTENING 489 /run/udev/control
unix 2 [ ] DGRAM 2548 /var/run/thd.socket
unix 3 [ ] STREAM CONNECTED 2619
unix 3 [ ] STREAM CONNECTED 2618
unix 3 [ ] STREAM CONNECTED 3055 /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 3019 /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 3142
unix 2 [ ] DGRAM 2762
unix 3 [ ] STREAM CONNECTED 3141
unix 2 [ ] DGRAM 3021
unix 3 [ ] STREAM CONNECTED 3018
unix 2 [ ] DGRAM 2599
unix 3 [ ] STREAM CONNECTED 3065 /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 3031
unix 3 [ ] STREAM CONNECTED 3064
unix 2 [ ] DGRAM 2681
unix 2 [ ] DGRAM 3194
unix 3 [ ] DGRAM 497
unix 3 [ ] STREAM CONNECTED 3054
unix 3 [ ] DGRAM 496
unix 2 [ ] DGRAM 3017
unix 3 [ ] STREAM CONNECTED 3032 /var/run/dbus/system_bus_socket

Why isn't udp 0 0 0.0.0.0:1194 0.0.0.0:*
listening? How can I change that?