nullne os:Linux c44220 2.6.32-431.3.1.el6.x86_64 #1 SMP Fri Jan 3 21:39:27 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux openvpn server:RPM version 4.8.0 openvpn client:OpenVPN GUI v5 ##############server.conf############# port 1194 proto tcp dev tun ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" keepalive 10 120 comp-lzo user nobody group nobody persist-key persist-tun status openvpn-status.log verb 3 ##########client.conf################################### client dev tun proto tcp remote 103.28.*.* 1194 #for some reason i hide my ip nobind persist-key persist-tun ca ca.crt cert nullne.crt key nullne.key ns-cert-type server comp-lzo verb 3 THEN,i paste some command results: [root@a~]# netstat -anp |grep "openvpn" tcp 0 0 0.0.0.0:1194 0.0.0.0:* LISTEN 979/openvpn unix 2 [ ] DGRAM 9025 979/openvpn [root@a ~]# sestatus SELinux status: disabled but finally,there still errors.waiting for help error: Fri Jan 17 20:54:47 2014 TCP: connect to [AF_INET]103.28.*.*:1194 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT) Fri Jan 17 20:54:52 2014 MANAGEMENT: >STATE:1389963292,TCP_CONNECT,,,
nullne debbie10t wroteFirewall / port forwarding . . . sorry,could you give the hints in detail?i can not get your point
nullne [root@a ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh REJECT all -- anywhere anywhere reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- anywhere anywhere reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) target prot opt source destination [root@a ~]# ifconfig eth1 Link encap:Ethernet HWaddr 00:15:5D:0A:66:00 inet addr:10.28.44.220 Bcast:10.28.44.255 Mask:255.255.255.0 inet6 addr: fe80::215:5dff:fe0a:6600/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:189323 errors:0 dropped:0 overruns:0 frame:0 TX packets:9099 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:21931238 (20.9 MiB) TX bytes:9157386 (8.7 MiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) [root@a ~]# route -vneFC Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0 10.28.44.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1 0.0.0.0 10.28.44.1 0.0.0.0 UG 0 0 0 eth1 Kernel IP routing cache Source Destination Gateway Flags MSS Window irtt Iface 10.28.44.56 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.140 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.220 202.46.52.129 10.28.44.1 1500 0 23 eth1 10.28.44.67 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.254 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.27 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.182 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.192 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.114 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.80 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.205 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.143 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.220 8.8.8.8 10.28.44.1 1500 0 0 eth1 10.28.44.220 8.8.8.8 10.28.44.1 1500 0 0 eth1 10.28.44.61 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.75 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.111 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.215 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.72 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.50 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.195 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.40 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.82 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.201 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 169.254.72.157 169.254.255.255 169.254.255.255 ri 1500 0 0 eth1 10.28.44.160 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.226 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 114.255.40.44 10.28.44.220 10.28.44.220 l 0 0 0 lo 0.0.0.0 255.255.255.255 255.255.255.255 bl 0 0 0 lo 169.254.204.67 169.254.255.255 169.254.255.255 ri 1500 0 0 eth1 10.28.44.73 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 202.46.52.129 10.28.44.220 10.28.44.220 l 0 0 0 lo 10.28.44.167 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.186 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.193 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.98 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.237 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.45 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.189 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.55 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.220 114.255.40.44 10.28.44.1 1500 0 0 eth1 10.28.44.119 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.196 10.28.44.255 10.28.44.255 ibl 0 0 0 lo 10.28.44.74 10.28.44.255 10.28.44.255 ibl 0 0 0 lo hope this be useful
