Hello.
I want to use my Dedicated Root Server as openvpn
client to connect to my VPN provider. Server runs on Debian 7 Wheezy.
After i connect the server to my VPN provider, server is no longer accessible on his fixed IP4, VPN and has no access to the Internet.
When i use the same configuration on my home server all works fine. Server is accessible from local and outside, server connect to internet.
Can you help me?
openvpn log:
OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
WARNING: file '/etc/openvpn/XXXX/clientXXXX.key' is group or others accessible
WARNING: file '/etc/openvpn/XXXX/nl5.XXXX.to.key' is group or others accessible
Control Channel Authentication: using '/etc/openvpn/nl5.XXXX.to/nl5.XXXX.to.key' as a OpenVPN static key file
Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
LZO compression initialized
Control Channel MTU parms [ L:1604 D:212 EF:112 EB:0 ET:0 EL:0 ]
Data Channel MTU parms [ L:1604 D:1450 EF:104 EB:135 ET:0 EL:0 AF:3/1 ]
Local Options hash (VER=V4): 'c19f87b0'
Expected Remote Options hash (VER=V4): 'eda38e81'
Attempting to establish TCP connection with [AF_INET]5.79.74.141:443 [nonblock]
TCP connection established with [AF_INET]5.79.74.141:443
TCPv4_CLIENT link local: [undef]
TCPv4_CLIENT link remote: [AF_INET]5.79.74.141:443
VERIFY OK: depth=1, /C=OO/ST=CommanderKeen/L=Vorticon/O=V2.XXXX.to/CN=V2.XXXX.to_CA/emailAddress=noreply@XXXX.to
VERIFY OK: nsCertType=SERVER
Validating certificate key usage
++ Certificate has key usage 00a0, expects 00a0
VERIFY KU OK
Validating certificate extended key usage
++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
VERIFY EKU OK
VERIFY OK: depth=0, /C=OO/ST=CommanderKeen/L=Vorticon/O=V2.XXXX.to/CN=nl5.XXXX.to/emailAddress=noreply@XXXX.to
Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Data Channel Encrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Data Channel Decrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
[XXXX.XXXX.XXXX.XXXX] Peer Connection Initiated with [AF_INET]5.XX.74.1XX:443
TUN/TAP device tun0 opened
do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
/sbin/ifconfig tun0 17X.16.3X.2X netmask 255.255.240.0 mtu 1500 broadcast 17X.16.4x.255
/etc/openvpn/update-resolv-conf tun0 1500 1604 17X.16.3X.2X 255.255.240.0 init
Initialization Sequence Completed
