Hi
I have installed OpenVPN on a VPS (VMware® ESXi). I can connect to the VPN, once connected I can ping any IP adress but no domain name. I want my VPN to handle the web trafic. The system is a debian 7 with apache2 (+ssl on port 443).
Here are my config files:
server.conf
port 1194
proto udp
dev tun
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
push "redirect-gateway def1"
push "route 10.8.0.0 255.255.252.0"
push "dhcp-option DNS 10.8.0.0"
client.conf (mac and linux (fedora) clients):
client
dev tun
proto udp
remote vpn.<mydomain>.fr 1194
ca ca.crt
cert <username>.crt
key <username>.key
nobind
persist-key
persist-tun
comp-lzo
verb 3
/etc/resolv.conf:
nameserver 127.0.0.1
nameserver 213.186.33.99
search ovh.net
ifconfig
eth0 Link encap:Ethernet HWaddr 02:00:05:87:94:ab
inet adr:5.135.148.171 Bcast:5.135.151.255 Masque:255.255.252.0
adr inet6: 2001:41d0:52:200::a6/64 Scope:Global
adr inet6: fe80::5ff:fe87:94ab/64 Scope:Lien
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:106375 errors:0 dropped:47 overruns:0 frame:0
TX packets:8230 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:1000
RX bytes:8138802 (7.7 MiB) TX bytes:2335486 (2.2 MiB)
lo Link encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
adr inet6: ::1/128 Scope:Hôte
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:88 errors:0 dropped:0 overruns:0 frame:0
TX packets:88 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:9107 (8.8 KiB) TX bytes:9107 (8.8 KiB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet adr:10.8.0.1 P-t-P:10.8.0.2 Masque:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:469 errors:0 dropped:0 overruns:0 frame:0
TX packets:374 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:100
RX bytes:61482 (60.0 KiB) TX bytes:232556 (227.1 KiB)
iptables-save:
# Generated by iptables-save v1.4.14 on Mon Jan 20 14:08:46 2014
*raw
:PREROUTING ACCEPT [11430:2207687]
:OUTPUT ACCEPT [6339:1970009]
COMMIT
# Completed on Mon Jan 20 14:08:46 2014
# Generated by iptables-save v1.4.14 on Mon Jan 20 14:08:46 2014
*nat
:PREROUTING ACCEPT [1647:202443]
:INPUT ACCEPT [1440:187086]
:OUTPUT ACCEPT [141:10221]
:POSTROUTING ACCEPT [141:10221]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Mon Jan 20 14:08:46 2014
# Generated by iptables-save v1.4.14 on Mon Jan 20 14:08:46 2014
*mangle
:PREROUTING ACCEPT [11430:2207687]
:INPUT ACCEPT [8881:1303289]
:FORWARD ACCEPT [2549:904398]
:OUTPUT ACCEPT [6342:1970725]
:POSTROUTING ACCEPT [8916:2879027]
COMMIT
# Completed on Mon Jan 20 14:08:46 2014
# Generated by iptables-save v1.4.14 on Mon Jan 20 14:08:46 2014
*filter
:INPUT ACCEPT [8359:1210859]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [5979:1931404]
-A FORWARD -i eth0 -o tun0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -o eth0 -j ACCEPT
COMMIT
# Completed on Mon Jan 20 14:08:46 2014
I hope I included everything I needed to.
The solution is probably obvious but I am now at the 3rd reinstall and I'm getting tired of it.
