[Solved] Client IP address not redirected

explus4host

Good Morning Guyz,
i have big problem really killing me 🙁
after big effort to install openvpn sucessfully
i had a problem with ip forwarding, after vpn connected i checked whatismyipaddress.com i found my real ip

server.conf

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

here's tutorial i had follow

http://www.servermom.org/how-to-build-openvpn-server-on-centos-6-x/732/

explus4host

/etc/openvpn/server.conf

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

client config (server.ovpn)

client
dev tun
proto udp
remote 162.221.191.243 1194 # - Your server IP and OpenVPN Port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
reneg-sec 0
verb 3

just browsing ..

about verb6, i can't really understand that 🙁 , i'm not expert with vpn

openvpn log,

Wed Feb 19 21:12:12 2014 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\server.log: Access is denied.   (errno=5)
Wed Feb 19 21:12:12 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Wed Feb 19 21:12:12 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Feb 19 21:12:12 2014 Need hold release from management interface, waiting...
Wed Feb 19 21:12:12 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Feb 19 21:12:13 2014 MANAGEMENT: CMD 'state on'
Wed Feb 19 21:12:13 2014 MANAGEMENT: CMD 'log all on'
Wed Feb 19 21:12:13 2014 MANAGEMENT: CMD 'hold off'
Wed Feb 19 21:12:13 2014 MANAGEMENT: CMD 'hold release'
Wed Feb 19 21:12:40 2014 MANAGEMENT: CMD 'username "Auth" "admin"'
Wed Feb 19 21:12:40 2014 MANAGEMENT: CMD 'password [...]'
Wed Feb 19 21:12:40 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Feb 19 21:12:40 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Feb 19 21:12:40 2014 UDPv4 link local: [undef]
Wed Feb 19 21:12:40 2014 UDPv4 link remote: [AF_INET]162.221.191.243:1194
Wed Feb 19 21:12:40 2014 MANAGEMENT: >STATE:1392837160,WAIT,,,
Wed Feb 19 21:12:40 2014 MANAGEMENT: >STATE:1392837160,AUTH,,,
Wed Feb 19 21:12:40 2014 TLS: Initial packet from [AF_INET]162.221.191.243:1194, sid=6276febf 8ad8e907
Wed Feb 19 21:12:40 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Feb 19 21:12:42 2014 VERIFY OK: depth=1, C=us, ST=CA, L=Buffalo, O=company, OU=server, CN=server.test.com, name=servermom, emailAddress=admin@explus4host.com
Wed Feb 19 21:12:42 2014 VERIFY OK: depth=0, C=us, ST=CA, L=Buffalo, O=company, OU=server, CN=server.test.com, name=servermom, emailAddress=admin@explus4host.com
Wed Feb 19 21:12:42 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 19 21:12:42 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 19 21:12:42 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 19 21:12:42 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 19 21:12:42 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Feb 19 21:12:42 2014 [server.test.com] Peer Connection Initiated with [AF_INET]162.221.191.243:1194
Wed Feb 19 21:12:43 2014 MANAGEMENT: >STATE:1392837163,GET_CONFIG,,,
Wed Feb 19 21:12:44 2014 SENT CONTROL [server.test.com]: 'PUSH_REQUEST' (status=1)
Wed Feb 19 21:12:45 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 162.221.191.243 255.255.255.225 net_gateway,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5'
Wed Feb 19 21:12:45 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Feb 19 21:12:45 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Feb 19 21:12:45 2014 OPTIONS IMPORT: route options modified
Wed Feb 19 21:12:45 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Feb 19 21:12:45 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Feb 19 21:12:45 2014 MANAGEMENT: >STATE:1392837165,ASSIGN_IP,,10.8.0.6,
Wed Feb 19 21:12:45 2014 open_tun, tt->ipv6=0
Wed Feb 19 21:12:45 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{4A1CC828-FB59-4CBA-8169-6F594612A191}.tap
Wed Feb 19 21:12:45 2014 TAP-Windows Driver Version 9.9 
Wed Feb 19 21:12:45 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {4A1CC828-FB59-4CBA-8169-6F594612A191} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed Feb 19 21:12:45 2014 NOTE: FlushIpNetTable failed on interface [17] {4A1CC828-FB59-4CBA-8169-6F594612A191} (status=5) : Access is denied.  
Wed Feb 19 21:12:50 2014 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Wed Feb 19 21:12:50 2014 C:\WINDOWS\system32\route.exe ADD 162.221.191.243 MASK 255.255.255.255 192.168.1.1
Wed Feb 19 21:12:50 2014 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=4]
Wed Feb 19 21:12:50 2014 Route addition via IPAPI failed [adaptive]
Wed Feb 19 21:12:50 2014 Route addition fallback to route.exe
Wed Feb 19 21:12:50 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Wed Feb 19 21:12:50 2014 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed Feb 19 21:12:50 2014 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Feb 19 21:12:50 2014 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=17]
Wed Feb 19 21:12:50 2014 Route addition via IPAPI failed [adaptive]
Wed Feb 19 21:12:50 2014 Route addition fallback to route.exe
Wed Feb 19 21:12:50 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Wed Feb 19 21:12:50 2014 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed Feb 19 21:12:50 2014 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Feb 19 21:12:50 2014 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=17]
Wed Feb 19 21:12:50 2014 Route addition via IPAPI failed [adaptive]
Wed Feb 19 21:12:50 2014 Route addition fallback to route.exe
Wed Feb 19 21:12:50 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Wed Feb 19 21:12:50 2014 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed Feb 19 21:12:50 2014 MANAGEMENT: >STATE:1392837170,ADD_ROUTES,,,
Wed Feb 19 21:12:50 2014 C:\WINDOWS\system32\route.exe ADD 162.221.191.243 MASK 255.255.255.225 192.168.1.1
Wed Feb 19 21:12:50 2014 Warning: address 162.221.191.243 is not a network address in relation to netmask 255.255.255.225
Wed Feb 19 21:12:50 2014 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.   [status=87 if_index=4]
Wed Feb 19 21:12:50 2014 Route addition via IPAPI failed [adaptive]
Wed Feb 19 21:12:50 2014 Route addition fallback to route.exe
Wed Feb 19 21:12:50 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Wed Feb 19 21:12:50 2014 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed Feb 19 21:12:50 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Wed Feb 19 21:12:50 2014 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=17]
Wed Feb 19 21:12:50 2014 Route addition via IPAPI failed [adaptive]
Wed Feb 19 21:12:50 2014 Route addition fallback to route.exe
Wed Feb 19 21:12:50 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Wed Feb 19 21:12:50 2014 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed Feb 19 21:12:50 2014 Initialization Sequence Completed
Wed Feb 19 21:12:50 2014 MANAGEMENT: >STATE:1392837170,CONNECTED,SUCCESS,10.8.0.6,162.221.191.243

last20 line from server log,

Feb 19 14:12:47 server openvpn[1053]: MULTI: multi_create_instance called
Feb 19 14:12:47 server openvpn[1053]: 41.234.99.134:27130 Re-using SSL/TLS context
Feb 19 14:12:47 server openvpn[1053]: 41.234.99.134:27130 LZO compression initialized
Feb 19 14:12:47 server openvpn[1053]: 41.234.99.134:27130 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Feb 19 14:12:47 server openvpn[1053]: 41.234.99.134:27130 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Feb 19 14:12:47 server openvpn[1053]: 41.234.99.134:27130 Local Options hash (VER=V4): '5b1533a2'
Feb 19 14:12:47 server openvpn[1053]: 41.234.99.134:27130 Expected Remote Options hash (VER=V4): 'd3a7571a'
Feb 19 14:12:47 server openvpn[1053]: 41.234.99.134:27130 TLS: Initial packet from 41.234.99.134:27130, sid=46dced2f be01a179
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 PLUGIN_CALL: POST /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 TLS: Username/Password authentication succeeded for username 'admin' [CN SET]
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA
Feb 19 14:12:49 server openvpn[1053]: 41.234.99.134:27130 [admin] Peer Connection Initiated with 41.234.99.134:27130
Feb 19 14:12:49 server openvpn[1053]: admin/41.234.99.134:27130 MULTI: Learn: 10.8.0.6 -> admin/41.234.99.134:27130
Feb 19 14:12:49 server openvpn[1053]: admin/41.234.99.134:27130 MULTI: primary virtual IP for admin/41.234.99.134:27130: 10.8.0.6
Feb 19 14:12:51 server openvpn[1053]: admin/41.234.99.134:27130 PUSH: Received control message: 'PUSH_REQUEST'
Feb 19 14:12:51 server openvpn[1053]: admin/41.234.99.134:27130 SENT CONTROL [admin]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 162.221.191.243 255.255.255.225 net_gateway,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5' (status=1)

explus4host

u know, i saw this error from first, and i spent 2 days looking for solution about ip forward !
after ur reply i was writing that this is not important error because i'm already administrator
but also i said to myself i will try run GUI as administrator !
i found it solved !!!!

Thanks A lot 🙂

we are learning new things everyday 🙂