OS is windows 8
Client is Iphone 4s connecting through 3G/Wi-Fi
My OpenVPN is working to the point where I can access the internet through the VPN, and access my router's interface via the VPN,
but when I try accessing the filezilla FTP server through VPN as a LAN access, I get blocked from accessing it.
However, when I disable the firewall for the firewall profile my Tap-Adaptor belongs to, such as public profile, I can connect successfully.
But the problem is I don't want to disable firewall for public profile, so I want to change the TAP adapter profile to private somehow, and then disable firewall for private.
I did that by giving my TAP-adaptor a static IP, subnet mask, and a default gateway.
Afterwords, I can disable the private firewall and it's all good...up until I restart the computer or restart the OpenVPN program/services.
It reconfigure my TAP adaptor to be dynamic and discards the settings for the static IP and default gateway, so it returns to being a public unidentified network.
Is there a way I can stop OpenVPN from doing that? or is it necessary for OpenVPN to work?
If it's necessary and can't be changed, then is there any other ways I can get TAP adaptor to be classified as private?
Or is anyone kind enough to tell me an even better solution than to disable firewall and still get FTP over VPN to work?
Here's my OpenVPN Log:
Wed Jan 01 11:21:06 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Jan 01 11:21:06 2014 Need hold release from management interface, waiting...
Wed Jan 01 11:21:06 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Jan 01 11:21:06 2014 MANAGEMENT: CMD 'state on'
Wed Jan 01 11:21:06 2014 MANAGEMENT: CMD 'log all on'
Wed Jan 01 11:21:06 2014 MANAGEMENT: CMD 'hold off'
Wed Jan 01 11:21:06 2014 MANAGEMENT: CMD 'hold release'
Wed Jan 01 11:21:06 2014 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Wed Jan 01 11:21:06 2014 Diffie-Hellman initialized with 1024 bit key
Wed Jan 01 11:21:06 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Jan 01 11:21:06 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jan 01 11:21:06 2014 MANAGEMENT: >STATE:1388535666,ASSIGN_IP,,192.168.137.1,
Wed Jan 01 11:21:06 2014 open_tun, tt->ipv6=0
Wed Jan 01 11:21:06 2014 TAP-WIN32 device [MyTap] opened: \\.\Global\{ADCA606F-5B75-4899-8F4E-0DFCDFAFC241}.tap
Wed Jan 01 11:21:06 2014 TAP-Windows Driver Version 9.9
Wed Jan 01 11:21:07 2014 NETSH: C:\Windows\system32\netsh.exe interface ip set address MyTap dhcp
Wed Jan 01 11:21:07 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.137.1/255.255.255.252 on interface {ADCA606F-5B75-4899-8F4E-0DFCDFAFC241} [DHCP-serv: 192.168.137.2, lease-time: 31536000]
Wed Jan 01 11:21:07 2014 Sleeping for 10 seconds...
Wed Jan 01 11:21:17 2014 Successful ARP Flush on interface [21] {ADCA606F-5B75-4899-8F4E-0DFCDFAFC241}
Wed Jan 01 11:21:17 2014 MANAGEMENT: >STATE:1388535677,ADD_ROUTES,,,
Wed Jan 01 11:21:17 2014 C:\Windows\system32\route.exe ADD 192.168.137.0 MASK 255.255.255.0 192.168.137.2
Wed Jan 01 11:21:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jan 01 11:21:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 01 11:21:17 2014 UDPv4 link local (bound): [undef]
Wed Jan 01 11:21:17 2014 UDPv4 link remote: [undef]
Wed Jan 01 11:21:17 2014 MULTI: multi_init called, r=256 v=256
Wed Jan 01 11:21:17 2014 IFCONFIG POOL: base=192.168.137.4 size=62, ipv6=0
Wed Jan 01 11:21:17 2014 ifconfig_pool_read(), in='MyClient,192.168.137.4', TODO: IPv6
Wed Jan 01 11:21:17 2014 succeeded -> ifconfig_pool_set()
Wed Jan 01 11:21:17 2014 IFCONFIG POOL LIST
Wed Jan 01 11:21:17 2014 MyClient,192.168.137.4
Wed Jan 01 11:21:17 2014 Initialization Sequence Completed
Wed Jan 01 11:21:17 2014 MANAGEMENT: >STATE:1388535677,CONNECTED,SUCCESS,192.168.137.1,
Wed Jan 01 11:21:17 2014 IP packet with unknown IP version=15 seen
Here's the server config:
port 1200 #change to any port you see fit. The client needs to use the same port
proto udp #switch to tcp if you wish to use a tcp connection, the client needs to use the same protocol. udp gives better performance
dev tun
dev-node MyTap #name of your TAP interface.
server 192.168.137.0 255.255.255.0 #This may need modification as dictated by Internet Connection Settings. This is the default for ICS on Windows 7.
ca ca.crt
cert MyServer.crt
key MyServer.key # This file should be kept secret
dh dh1024.pem
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1" #tells all Internet traffic to go through the tunnel
push "dhcp-option DNS 208.67.222.222" #OpenDNS servers, makes it easy to check if the tunnel is working properly
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo #compression for better network performance. Disable if your server isn't powerful enough. Needs to be included in both server and client configs if you use it.
persist-key
persist-tun
status openvpn-status.log
verb 3
Note:
I also tried changing the media status of my tap adaptor to always connected through TAP Adaptor > Properties > Configure > Advanced.
I allowed inbound connection for UDP 1200.
