debbie10t wroteDid you read the entire tutorial thread you posted ? Namely
*this* post . . .
Yes I did, unfortunately still no difference. Remember my OpenVPN server is not running on the 'main' router, so the WAN rules are not implemented.
OpenVPN server iptables:
root@TL-WR1043ND-2:~# iptables -L -v -t nat
Chain PREROUTING (policy ACCEPT 760 packets, 115K bytes)
pkts bytes target prot opt in out source destination
760 115K delegate_prerouting all -- any any anywhere anywhere
Chain INPUT (policy ACCEPT 84 packets, 14944 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 37 packets, 2812 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 37 packets, 2812 bytes)
pkts bytes target prot opt in out source destination
37 2812 delegate_postrouting all -- any any anywhere anywhere
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
Chain delegate_postrouting (1 references)
pkts bytes target prot opt in out source destination
37 2812 postrouting_rule all -- any any anywhere anywhere /* user chain for postrouting */
37 2812 zone_lan_postrouting all -- any br-lan anywhere anywhere
0 0 zone_wan_postrouting all -- any eth0.2 anywhere anywhere
0 0 zone_VPN_postrouting all -- any tun0 anywhere anywhere
Chain delegate_prerouting (1 references)
pkts bytes target prot opt in out source destination
760 115K prerouting_rule all -- any any anywhere anywhere /* user chain for prerouting */
760 115K zone_lan_prerouting all -- br-lan any anywhere anywhere
0 0 zone_wan_prerouting all -- eth0.2 any anywhere anywhere
0 0 zone_VPN_prerouting all -- tun0 any anywhere anywhere
Chain postrouting_VPN_rule (1 references)
pkts bytes target prot opt in out source destination
Chain postrouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain postrouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_VPN_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain zone_VPN_postrouting (1 references)
pkts bytes target prot opt in out source destination
0 0 postrouting_VPN_rule all -- any any anywhere anywhere /* user chain for postrouting */
Chain zone_VPN_prerouting (1 references)
pkts bytes target prot opt in out source destination
0 0 prerouting_VPN_rule all -- any any anywhere anywhere /* user chain for prerouting */
Chain zone_lan_postrouting (1 references)
pkts bytes target prot opt in out source destination
37 2812 postrouting_lan_rule all -- any any anywhere anywhere /* user chain for postrouting */
Chain zone_lan_prerouting (1 references)
pkts bytes target prot opt in out source destination
760 115K prerouting_lan_rule all -- any any anywhere anywhere /* user chain for prerouting */
Chain zone_wan_postrouting (1 references)
pkts bytes target prot opt in out source destination
0 0 postrouting_wan_rule all -- any any anywhere anywhere /* user chain for postrouting */
0 0 MASQUERADE all -- any any anywhere anywhere
Chain zone_wan_prerouting (1 references)
pkts bytes target prot opt in out source destination
0 0 MINIUPNPD all -- any any anywhere anywhere
0 0 prerouting_wan_rule all -- any any anywhere anywhere /* user chain for prerouting */
Windows 7 client:
eth0
Network: 172.20.10.0/24
IP Address: 172.20.10.2
Default gateway: 172.20.10.1
tap0
Network: 172.16.0.0/24
IP Address: 172.16.0.6
Default gateway: undefined
Network interfaces:
Windows IP-configuratie
Hostnaam . . . . . . . . . . . . : Martijn-PC
Primair DNS-achtervoegsel . . . . :
Knooppunttype . . . . . . . . . . : hybride
IP-routering ingeschakeld . . . . : nee
WINS-proxy ingeschakeld . . . . . : nee
DNS-achtervoegselzoeklijst. . . . : 192.168.1.1
Ethernet-adapter voor LAN-verbinding 2:
Verbindingsspec. DNS-achtervoegsel: 192.168.1.1
Beschrijving. . . . . . . . . . . : TAP-Windows Adapter V9
Fysiek adres. . . . . . . . . . . : 00-FF-1A-BC-BC-65
DHCP ingeschakeld . . . . . . . . : ja
Autom. configuratie ingeschakeld : ja
Link-local IPv6-adres . . . . . . : fe80::cdff:ebcf:21f7:e08d%17(voorkeur)
IPv4-adres. . . . . . . . . . . . : 172.16.0.6(voorkeur)
Subnetmasker. . . . . . . . . . . : 255.255.255.252
Lease verkregen . . . . . . . . . : donderdag 9 januari 2014 18:53:40
Lease verlopen. . . . . . . . . . : vrijdag 9 januari 2015 18:53:40
Standaardgateway. . . . . . . . . : 172.16.0.5
DHCP-server . . . . . . . . . . . : 172.16.0.5
DHCPv6 IAID . . . . . . . . . . . : 352386842
DHCPv6-client DUID. . . . . . . . : 00-01-00-01-19-BE-15-D4-00-21-70-F4-7D-62
DNS-servers . . . . . . . . . . . : 192.168.1.1
NetBIOS via TCPIP . . . . . . . . : ingeschakeld
Draadloos LAN-adapter voor Draadloze netwerkverbinding:
Verbindingsspec. DNS-achtervoegsel:
Beschrijving. . . . . . . . . . . : Intel(R) WiFi Link 5100 AGN
Fysiek adres. . . . . . . . . . . : 00-22-FB-AE-EB-D0
DHCP ingeschakeld . . . . . . . . : ja
Autom. configuratie ingeschakeld : ja
Link-local IPv6-adres . . . . . . : fe80::4870:8352:95db:d4ce%12(voorkeur)
IPv4-adres. . . . . . . . . . . . : 172.20.10.2(voorkeur)
Subnetmasker. . . . . . . . . . . : 255.255.255.240
Lease verkregen . . . . . . . . . : donderdag 9 januari 2014 18:52:37
Lease verlopen. . . . . . . . . . : vrijdag 10 januari 2014 18:38:13
Standaardgateway. . . . . . . . . :
DHCP-server . . . . . . . . . . . : 172.20.10.1
DHCPv6 IAID . . . . . . . . . . . : 218112763
DHCPv6-client DUID. . . . . . . . : 00-01-00-01-19-BE-15-D4-00-21-70-F4-7D-62
DNS-servers . . . . . . . . . . . : 172.20.10.1
NetBIOS via TCPIP . . . . . . . . : ingeschakeld
Ethernet-adapter voor LAN-verbinding:
Mediumstatus. . . . . . . . . . . : medium ontkoppeld
Verbindingsspec. DNS-achtervoegsel:
Beschrijving. . . . . . . . . . . : Intel(R) 82567LM Gigabit-netwerkverbindin
g
Fysiek adres. . . . . . . . . . . : 00-21-70-F4-7D-62
DHCP ingeschakeld . . . . . . . . : nee
Autom. configuratie ingeschakeld : ja
Ethernet-adapter voor VirtualBox Host-Only Network:
Verbindingsspec. DNS-achtervoegsel:
Beschrijving. . . . . . . . . . . : VirtualBox Host-Only Ethernet Adapter
Fysiek adres. . . . . . . . . . . : 08-00-27-00-F8-BA
DHCP ingeschakeld . . . . . . . . : nee
Autom. configuratie ingeschakeld : ja
Link-local IPv6-adres . . . . . . : fe80::f42c:1229:5566:4acc%21(voorkeur)
Automatisch geconf.IPv4-adres . . : 169.254.74.204(voorkeur)
Subnetmasker. . . . . . . . . . . : 255.255.0.0
Standaardgateway. . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 302514215
DHCPv6-client DUID. . . . . . . . : 00-01-00-01-19-BE-15-D4-00-21-70-F4-7D-62
DNS-servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS via TCPIP . . . . . . . . : ingeschakeld
Tunnel-adapter voor isatap.{79C70A47-17F9-4152-9696-E922191E15AD}:
Mediumstatus. . . . . . . . . . . : medium ontkoppeld
Verbindingsspec. DNS-achtervoegsel:
Beschrijving. . . . . . . . . . . : Microsoft ISATAP Adapter
Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP ingeschakeld . . . . . . . . : nee
Autom. configuratie ingeschakeld : ja
Tunnel-adapter voor Teredo Tunneling Pseudo-Interface:
Mediumstatus. . . . . . . . . . . : medium ontkoppeld
Verbindingsspec. DNS-achtervoegsel:
Beschrijving. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP ingeschakeld . . . . . . . . : nee
Autom. configuratie ingeschakeld : ja
Tunnel-adapter voor isatap.{988C1DC8-6E12-479A-842C-67DE08A207F9}:
Mediumstatus. . . . . . . . . . . : medium ontkoppeld
Verbindingsspec. DNS-achtervoegsel:
Beschrijving. . . . . . . . . . . : Microsoft ISATAP Adapter #3
Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP ingeschakeld . . . . . . . . : nee
Autom. configuratie ingeschakeld : ja
Tunnel-adapter voor isatap.192.168.1.1:
Mediumstatus. . . . . . . . . . . : medium ontkoppeld
Verbindingsspec. DNS-achtervoegsel: 192.168.1.1
Beschrijving. . . . . . . . . . . : Microsoft ISATAP Adapter #4
Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP ingeschakeld . . . . . . . . : nee
Autom. configuratie ingeschakeld : ja
Routing table:
===========================================================================
Interfacelijst
17...00 ff 1a bc bc 65 ......TAP-Windows Adapter V9
12...00 22 fb ae eb d0 ......Intel(R) WiFi Link 5100 AGN
11...00 21 70 f4 7d 62 ......Intel(R) 82567LM Gigabit-netwerkverbinding
21...08 00 27 00 f8 ba ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
22...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================
IPv4 routetabel
===========================================================================
Actieve routes:
Netwerkadres Netmasker Gateway Interface Metric
0.0.0.0 0.0.0.0 172.16.0.5 172.16.0.6 30
82.72.237.208 255.255.255.255 172.20.10.1 172.20.10.2 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 169.254.74.204 276
169.254.74.204 255.255.255.255 On-link 169.254.74.204 276
169.254.255.255 255.255.255.255 On-link 169.254.74.204 276
172.16.0.0 255.255.255.0 172.16.0.5 172.16.0.6 30
172.16.0.4 255.255.255.252 On-link 172.16.0.6 286
172.16.0.6 255.255.255.255 On-link 172.16.0.6 286
172.16.0.7 255.255.255.255 On-link 172.16.0.6 286
172.20.10.0 255.255.255.240 On-link 172.20.10.2 281
172.20.10.2 255.255.255.255 On-link 172.20.10.2 281
172.20.10.15 255.255.255.255 On-link 172.20.10.2 281
192.168.1.0 255.255.255.0 172.16.0.5 172.16.0.6 30
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 169.254.74.204 276
224.0.0.0 240.0.0.0 On-link 172.16.0.6 286
224.0.0.0 240.0.0.0 On-link 172.20.10.2 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 169.254.74.204 276
255.255.255.255 255.255.255.255 On-link 172.16.0.6 286
255.255.255.255 255.255.255.255 On-link 172.20.10.2 281
===========================================================================
Permanente routes:
Netwerkadres Netmask Gateway-adres Metric
0.0.0.0 0.0.0.0 192.168.1.1 Standaard
===========================================================================
IPv6 routetabel
===========================================================================
Actieve routes:
Indien metrische netwerkbestemming Gateway
1 306 ::1/128 On-link
21 276 fe80::/64 On-link
17 286 fe80::/64 On-link
12 281 fe80::/64 On-link
12 281 fe80::4870:8352:95db:d4ce/128
On-link
17 286 fe80::cdff:ebcf:21f7:e08d/128
On-link
21 276 fe80::f42c:1229:5566:4acc/128
On-link
1 306 ff00::/8 On-link
21 276 ff00::/8 On-link
17 286 ff00::/8 On-link
12 281 ff00::/8 On-link
===========================================================================
Permanente routes:
Geen
Netstat:
Actieve verbindingen
Proto Lokaal adres Extern adres Status
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49156 0.0.0.0:0 LISTENING
TCP 127.0.0.1:4370 0.0.0.0:0 LISTENING
TCP 127.0.0.1:4380 0.0.0.0:0 LISTENING
TCP 127.0.0.1:5939 0.0.0.0:0 LISTENING
TCP 127.0.0.1:25340 0.0.0.0:0 LISTENING
TCP 127.0.0.1:25340 127.0.0.1:49380 ESTABLISHED
TCP 127.0.0.1:49380 127.0.0.1:25340 ESTABLISHED
TCP 169.254.74.204:139 0.0.0.0:0 LISTENING
TCP 172.16.0.6:139 0.0.0.0:0 LISTENING
TCP 172.20.10.2:139 0.0.0.0:0 LISTENING
TCP [::]:135 [::]:0 LISTENING
TCP [::]:445 [::]:0 LISTENING
TCP [::]:5357 [::]:0 LISTENING
TCP [::]:49152 [::]:0 LISTENING
TCP [::]:49153 [::]:0 LISTENING
TCP [::]:49154 [::]:0 LISTENING
TCP [::]:49155 [::]:0 LISTENING
TCP [::]:49156 [::]:0 LISTENING
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:55661 *:*
UDP 0.0.0.0:56407 *:*
UDP 0.0.0.0:63450 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:59612 *:*
UDP 169.254.74.204:137 *:*
UDP 169.254.74.204:138 *:*
UDP 169.254.74.204:1900 *:*
UDP 172.16.0.6:137 *:*
UDP 172.16.0.6:138 *:*
UDP 172.16.0.6:1900 *:*
UDP 172.16.0.6:59611 *:*
UDP 172.20.10.2:137 *:*
UDP 172.20.10.2:138 *:*
UDP 172.20.10.2:1900 *:*
UDP [::]:500 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:4500 *:*
UDP [::]:5355 *:*
UDP [::]:55662 *:*
UDP [::]:56408 *:*
UDP [::1]:1900 *:*
UDP [::1]:59610 *:*
UDP [fe80::4870:8352:95db:d4ce%12]:546 *:*
UDP [fe80::4870:8352:95db:d4ce%12]:1900 *:*
UDP [fe80::cdff:ebcf:21f7:e08d%17]:546 *:*
UDP [fe80::cdff:ebcf:21f7:e08d%17]:1900 *:*
UDP [fe80::cdff:ebcf:21f7:e08d%17]:59609 *:*
UDP [fe80::f42c:1229:5566:4acc%21]:1900 *:*
ARP list:
Interface: 172.20.10.2 --- 0xc
Internetadres Fysiek adres Type
172.20.10.1 be-52-b7-c1-9f-64 dynamisch
172.20.10.15 ff-ff-ff-ff-ff-ff statisch
224.0.0.22 01-00-5e-00-00-16 statisch
224.0.0.252 01-00-5e-00-00-fc statisch
255.255.255.255 ff-ff-ff-ff-ff-ff statisch
Interface: 172.16.0.6 --- 0x11
Internetadres Fysiek adres Type
172.16.0.5 00-ff-1b-bc-bc-65 dynamisch
172.16.0.7 ff-ff-ff-ff-ff-ff statisch
224.0.0.22 01-00-5e-00-00-16 statisch
224.0.0.252 01-00-5e-00-00-fc statisch
239.255.255.250 01-00-5e-7f-ff-fa statisch
255.255.255.255 ff-ff-ff-ff-ff-ff statisch
Interface: 169.254.74.204 --- 0x15
Internetadres Fysiek adres Type
169.254.255.255 ff-ff-ff-ff-ff-ff statisch
224.0.0.22 01-00-5e-00-00-16 statisch
224.0.0.252 01-00-5e-00-00-fc statisch
