hello , i have installe openvpn 2.3.2 in centos 6 , and installed openvpen client in windows 7 client after connection with openvpn ,I lose connection with internet ( just http request, but skype and fillezilla still work correctly ) please help .

this my config : server.conf: [color=#0000FF]port 1194 proto udp dev tap dev tun ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh2048.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 208.67.222.222" push "dhcp-option DNS 208.67.220.220" client-to-client keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3[/color] client.ovpn : [color=#0000FF]client dev tun proto udp remote vps41334.ovh.net 1194 resolv-retry infinite nobind persist-key persist-tun ca "C://keys//ca.crt" cert "C://keys//client1.crt" key "C://keys//client1.key" ns-cert-type server comp-lzo verb 3 [/color] where can i found the log files ?

yes i'm running windows client as administrator log file windows client : [code]Tue Mar 04 19:33:58 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011 Tue Mar 04 19:33:58 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Mar 04 19:33:58 2014 LZO compression initialized Tue Mar 04 19:33:58 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Tue Mar 04 19:33:58 2014 Socket Buffers: R=[8192->8192] S=[65536->65536] Tue Mar 04 19:33:58 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Tue Mar 04 19:33:58 2014 Local Options hash (VER=V4): '41690919' Tue Mar 04 19:33:58 2014 Expected Remote Options hash (VER=V4): '530fdded' Tue Mar 04 19:33:58 2014 UDPv4 link local: [undef] Tue Mar 04 19:33:58 2014 UDPv4 link remote: 37.187.199.85:1194 Tue Mar 04 19:33:58 2014 TLS: Initial packet from 37.187.199.85:1194, sid=f1f03607 7bd9762b Tue Mar 04 19:34:00 2014 VERIFY OK: depth=1, /C=fr/ST=fr/L=paris/O=meg_web_synergie/OU=fr/CN=Meg_web_synegie_CA/name=EasyRSA/emailAddress=chaker.info@gmail.com Tue Mar 04 19:34:00 2014 VERIFY OK: nsCertType=SERVER Tue Mar 04 19:34:00 2014 VERIFY OK: depth=0, /C=fr/ST=FR/L=Paris/O=Meg_web_synegie/OU=FR/CN=server/name=EasyRSA/emailAddress=m_gozlan@hotmail.com Tue Mar 04 19:34:01 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Tue Mar 04 19:34:01 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Tue Mar 04 19:34:01 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Tue Mar 04 19:34:01 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Tue Mar 04 19:34:01 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Tue Mar 04 19:34:01 2014 [server] Peer Connection Initiated with 37.187.199.85:1194 Tue Mar 04 19:34:04 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Tue Mar 04 19:34:04 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' Tue Mar 04 19:34:04 2014 OPTIONS IMPORT: timers and/or timeouts modified Tue Mar 04 19:34:04 2014 OPTIONS IMPORT: --ifconfig/up options modified Tue Mar 04 19:34:04 2014 OPTIONS IMPORT: route options modified Tue Mar 04 19:34:04 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Tue Mar 04 19:34:04 2014 ROUTE default_gateway=192.168.1.1 Tue Mar 04 19:34:04 2014 TAP-WIN32 device [Connexion au réseau local 8] opened: \\.\Global\{24794FFD-B116-41A2-ABC5-24E97B7083FC}.tap Tue Mar 04 19:34:04 2014 TAP-Win32 Driver Version 9.9 Tue Mar 04 19:34:04 2014 TAP-Win32 MTU=1500 Tue Mar 04 19:34:04 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {24794FFD-B116-41A2-ABC5-24E97B7083FC} [DHCP-serv: 10.8.0.5, lease-time: 31536000] Tue Mar 04 19:34:04 2014 Successful ARP Flush on interface [36] {24794FFD-B116-41A2-ABC5-24E97B7083FC} Tue Mar 04 19:34:09 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Tue Mar 04 19:34:09 2014 C:\WINDOWS\system32\route.exe ADD 37.187.199.85 MASK 255.255.255.255 192.168.1.1 Tue Mar 04 19:34:09 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4 Tue Mar 04 19:34:09 2014 Route addition via IPAPI succeeded [adaptive] Tue Mar 04 19:34:09 2014 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5 Tue Mar 04 19:34:09 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Tue Mar 04 19:34:09 2014 Route addition via IPAPI succeeded [adaptive] Tue Mar 04 19:34:09 2014 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5 Tue Mar 04 19:34:09 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Tue Mar 04 19:34:09 2014 Route addition via IPAPI succeeded [adaptive] Tue Mar 04 19:34:09 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5 Tue Mar 04 19:34:09 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Tue Mar 04 19:34:09 2014 Route addition via IPAPI succeeded [adaptive] Tue Mar 04 19:34:09 2014 Initialization Sequence Completed Tue Mar 04 19:35:21 2014 TCP/UDP: Closing socket Tue Mar 04 19:35:21 2014 C:\WINDOWS\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.5 Tue Mar 04 19:35:21 2014 Route deletion via IPAPI succeeded [adaptive] Tue Mar 04 19:35:21 2014 C:\WINDOWS\system32\route.exe DELETE 37.187.199.85 MASK 255.255.255.255 192.168.1.1 Tue Mar 04 19:35:21 2014 Route deletion via IPAPI succeeded [adaptive] Tue Mar 04 19:35:21 2014 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5 Tue Mar 04 19:35:21 2014 Route deletion via IPAPI succeeded [adaptive] Tue Mar 04 19:35:21 2014 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5 Tue Mar 04 19:35:21 2014 Route deletion via IPAPI succeeded [adaptive] Tue Mar 04 19:35:21 2014 Closing TUN/TAP interface Tue Mar 04 19:35:21 2014 SIGTERM[hard,] received, process exiting[/code] log file openvpn server: [code]OpenVPN CLIENT LIST Updated,Tue Mar 4 19:30:48 2014 Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since ROUTING TABLE Virtual Address,Common Name,Real Address,Last Ref GLOBAL STATS Max bcast/mcast queue length,0 END[/code]

my firewall is desactivated again may log client : [code]Wed Mar 05 11:47:13 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011 Wed Mar 05 11:47:13 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Wed Mar 05 11:47:14 2014 LZO compression initialized Wed Mar 05 11:47:14 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Wed Mar 05 11:47:14 2014 Socket Buffers: R=[8192->8192] S=[65536->65536] Wed Mar 05 11:47:14 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Wed Mar 05 11:47:14 2014 Local Options hash (VER=V4): '41690919' Wed Mar 05 11:47:14 2014 Expected Remote Options hash (VER=V4): '530fdded' Wed Mar 05 11:47:14 2014 UDPv4 link local: [undef] Wed Mar 05 11:47:14 2014 UDPv4 link remote: 37.187.199.85:1194 Wed Mar 05 11:47:14 2014 TLS: Initial packet from 37.187.199.85:1194, sid=11abeec4 57723592 Wed Mar 05 11:47:15 2014 VERIFY OK: depth=1, /C=fr/ST=fr/L=paris/O=meg_web_synergie/OU=fr/CN=Meg_web_synegie_CA/name=EasyRSA/emailAddress=chaker.info@gmail.com Wed Mar 05 11:47:15 2014 VERIFY OK: nsCertType=SERVER Wed Mar 05 11:47:15 2014 VERIFY OK: depth=0, /C=fr/ST=FR/L=Paris/O=Meg_web_synegie/OU=FR/CN=server/name=EasyRSA/emailAddress=m_gozlan@hotmail.com Wed Mar 05 11:47:16 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Wed Mar 05 11:47:16 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Mar 05 11:47:16 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Wed Mar 05 11:47:16 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Mar 05 11:47:16 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Wed Mar 05 11:47:16 2014 [server] Peer Connection Initiated with 37.187.199.85:1194 Wed Mar 05 11:47:18 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Wed Mar 05 11:47:18 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' Wed Mar 05 11:47:18 2014 OPTIONS IMPORT: timers and/or timeouts modified Wed Mar 05 11:47:18 2014 OPTIONS IMPORT: --ifconfig/up options modified Wed Mar 05 11:47:18 2014 OPTIONS IMPORT: route options modified Wed Mar 05 11:47:18 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Wed Mar 05 11:47:18 2014 ROUTE default_gateway=192.168.1.1 Wed Mar 05 11:47:18 2014 TAP-WIN32 device [Connexion au réseau local 8] opened: \\.\Global\{24794FFD-B116-41A2-ABC5-24E97B7083FC}.tap Wed Mar 05 11:47:18 2014 TAP-Win32 Driver Version 9.9 Wed Mar 05 11:47:18 2014 TAP-Win32 MTU=1500 Wed Mar 05 11:47:18 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {24794FFD-B116-41A2-ABC5-24E97B7083FC} [DHCP-serv: 10.8.0.5, lease-time: 31536000] Wed Mar 05 11:47:18 2014 Successful ARP Flush on interface [36] {24794FFD-B116-41A2-ABC5-24E97B7083FC} Wed Mar 05 11:47:23 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Wed Mar 05 11:47:23 2014 C:\WINDOWS\system32\route.exe ADD 37.187.199.85 MASK 255.255.255.255 192.168.1.1 Wed Mar 05 11:47:23 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4 Wed Mar 05 11:47:23 2014 Route addition via IPAPI succeeded [adaptive] Wed Mar 05 11:47:23 2014 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5 Wed Mar 05 11:47:23 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Wed Mar 05 11:47:23 2014 Route addition via IPAPI succeeded [adaptive] Wed Mar 05 11:47:23 2014 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5 Wed Mar 05 11:47:23 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Wed Mar 05 11:47:23 2014 Route addition via IPAPI succeeded [adaptive] Wed Mar 05 11:47:23 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5 Wed Mar 05 11:47:23 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Wed Mar 05 11:47:23 2014 Route addition via IPAPI succeeded [adaptive] Wed Mar 05 11:47:23 2014 Initialization Sequence Completed[/code] log server : [code]Wed Mar 5 11:46:35 2014 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013 Wed Mar 5 11:46:35 2014 Diffie-Hellman initialized with 2048 bit key Wed Mar 5 11:46:35 2014 Socket Buffers: R=[212992->131072] S=[212992->131072] Wed Mar 5 11:46:35 2014 ROUTE_GATEWAY 37.187.199.254/255.255.255.0 IFACE=eth0 HWADDR=02:00:25:bb:c7:55 Wed Mar 5 11:46:35 2014 TUN/TAP device tun0 opened Wed Mar 5 11:46:35 2014 TUN/TAP TX queue length set to 100 Wed Mar 5 11:46:35 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Wed Mar 5 11:46:35 2014 /sbin/ip link set dev tun0 up mtu 1500 Wed Mar 5 11:46:35 2014 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2 Wed Mar 5 11:46:35 2014 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2 Wed Mar 5 11:46:35 2014 UDPv4 link local (bound): [AF_INET]37.187.199.85:1194 Wed Mar 5 11:46:35 2014 UDPv4 link remote: [undef] Wed Mar 5 11:46:35 2014 MULTI: multi_init called, r=256 v=256 Wed Mar 5 11:46:35 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Wed Mar 5 11:46:35 2014 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6 Wed Mar 5 11:46:35 2014 succeeded -> ifconfig_pool_set() Wed Mar 5 11:46:35 2014 IFCONFIG POOL LIST Wed Mar 5 11:46:35 2014 client1,10.8.0.4 Wed Mar 5 11:46:35 2014 Initialization Sequence Completed Wed Mar 5 11:47:14 2014 197.27.79.26:49493 TLS: Initial packet from [AF_INET]197.27.79.26:49493, sid=5511ee33 5ccdd2fb Wed Mar 5 11:47:16 2014 197.27.79.26:49493 VERIFY OK: depth=1, C=fr, ST=fr, L=paris, O=meg web synergie, OU=fr, CN=Meg web synegie CA, name=EasyRSA, emailAddress=chaker.info@gmail.com Wed Mar 5 11:47:16 2014 197.27.79.26:49493 VERIFY OK: depth=0, C=fr, ST=fr, L=paris, O=Meg web synergie, OU=fr, CN=client1, name=EasyRSA, emailAddress=chaker.info@gmail.com Wed Mar 5 11:47:16 2014 197.27.79.26:49493 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Wed Mar 5 11:47:16 2014 197.27.79.26:49493 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Mar 5 11:47:16 2014 197.27.79.26:49493 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Wed Mar 5 11:47:16 2014 197.27.79.26:49493 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Mar 5 11:47:16 2014 197.27.79.26:49493 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Wed Mar 5 11:47:16 2014 197.27.79.26:49493 [client1] Peer Connection Initiated with [AF_INET]197.27.79.26:49493 Wed Mar 5 11:47:16 2014 client1/197.27.79.26:49493 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled) Wed Mar 5 11:47:16 2014 client1/197.27.79.26:49493 MULTI: Learn: 10.8.0.6 -> client1/197.27.79.26:49493 Wed Mar 5 11:47:16 2014 client1/197.27.79.26:49493 MULTI: primary virtual IP for client1/197.27.79.26:49493: 10.8.0.6 Wed Mar 5 11:47:18 2014 client1/197.27.79.26:49493 PUSH: Received control message: 'PUSH_REQUEST' Wed Mar 5 11:47:18 2014 client1/197.27.79.26:49493 send_push_reply(): safe_cap=940 Wed Mar 5 11:47:18 2014 client1/197.27.79.26:49493 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1) [/code]

on your vpn server post the output of: iptables -L iptables -L -t nat sestatus Michael.

iptables -L: [code]Chain INPUT (policy DROP) target prot opt source destination acctboth all -- anywhere anywhere ACCEPT tcp -- cdns.ovh.net anywhere tcp dpt:domain ACCEPT udp -- cdns.ovh.net anywhere udp dpt:domain ACCEPT tcp -- cdns.ovh.net anywhere tcp spt:domain ACCEPT udp -- cdns.ovh.net anywhere udp spt:domain LOCALINPUT all -- anywhere anywhere ACCEPT all -- anywhere anywhere INVALID tcp -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:domain ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:imap ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:urd ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:submission ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:imaps ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3s ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:tsrmagt ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:tpcsrvr ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:infowave ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:radsec ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:gnunet ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:eli ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nbx-ser ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nbx-dir ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:openvpn ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp-data ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:domain ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:openvpn ACCEPT icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp echo-reply limit: avg 1/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp destination-unreachable LOGDROPIN all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy DROP) target prot opt source destination acctboth all -- anywhere anywhere ACCEPT tcp -- anywhere cdns.ovh.net tcp dpt:domain ACCEPT udp -- anywhere cdns.ovh.net udp dpt:domain ACCEPT tcp -- anywhere cdns.ovh.net tcp spt:domain ACCEPT udp -- anywhere cdns.ovh.net udp spt:domain LOCALOUTPUT all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp spt:domain ACCEPT udp -- anywhere anywhere udp spt:domain ACCEPT all -- anywhere anywhere INVALID tcp -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:time ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nicname ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:domain ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:auth ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:submission ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:rsync ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:gnunet ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:eli ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:sep ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:sms-chat ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:openvpn ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp-data ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:domain ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:auth ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ntp ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:rsync ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:6277 ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:openvpn ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp destination-unreachable DROP all -- anywhere anywhere Chain ALLOWIN (1 references) target prot opt source destination ACCEPT all -- sge91-1-82-234-15-56.fbx.proxad.net anywhere ACCEPT all -- 41.230.239.88 anywhere Chain ALLOWOUT (1 references) target prot opt source destination ACCEPT all -- anywhere sge91-1-82-234-15-56.fbx.proxad.net ACCEPT all -- anywhere 41.230.239.88 Chain DENYIN (1 references) target prot opt source destination DROP all -- 121.199.56.139 anywhere DROP all -- 250.ip-37-187-62.eu anywhere DROP all -- 176-31-115-73.ovh.net anywhere DROP all -- 112.ip-37-187-67.eu anywhere DROP all -- weblinux01.tecla.com.br anywhere DROP all -- 200.51.174.61.dial.wz.zj.dynamic.163data.com.cn anywhere DROP all -- 210.51.174.61.dial.wz.zj.dynamic.163data.com.cn anywhere DROP all -- ks3373898.kimsufi.com anywhere DROP all -- whl0094.whservidor.com anywhere DROP all -- www.sincreo.it anywhere DROP all -- bband-dyn140.178-41-243.t-com.sk anywhere DROP all -- 189-47-132-239.dsl.telesp.net.br anywhere DROP all -- dynamic.vdc.vn anywhere DROP all -- 68-188-72-60.static.stls.mo.charter.com anywhere DROP all -- 210.186.155.170 anywhere DROP all -- 173-14-48-145-Michigan.hfc.comcastbusiness.net anywhere DROP all -- p578bd5ec.dip0.t-ipconnect.de anywhere DROP all -- 232.Red-83-40-53.dynamicIP.rima-tde.net anywhere DROP all -- ks3289417.kimsufi.com anywhere DROP all -- 80.174.162.141.dyn.user.ono.com anywhere DROP all -- 190.85.26.37 anywhere DROP all -- wsip-174-79-39-4.ph.ph.cox.net anywhere DROP all -- ool-6038b4da.static.optonline.net anywhere DROP all -- host130.181-15-98.telecom.net.ar anywhere DROP all -- s208-180-21-173.bcstcmta02.clsttx.tl.sta.suddenlink.net anywhere DROP all -- host213-120-102-252.in-addr.btopenworld.com anywhere DROP all -- ool-4b7ff3d2.static.optonline.net anywhere DROP all -- mail.dati.com.tr anywhere DROP all -- 221.164.212.117 anywhere DROP all -- 75-151-145-195-Philadelphia.hfc.comcastbusiness.net anywhere DROP all -- adsl-074-165-019-209.sip.asm.bellsouth.net anywhere DROP all -- diagmed.cas.gvt.net.br anywhere DROP all -- cable-89-216-21-136.static.sbb.rs anywhere DROP all -- 122-146-1-206.static.sparqnet.net anywhere DROP all -- 82.114.80.154 anywhere DROP all -- h72-2-20-183.bigpipeinc.com anywhere DROP all -- 177-139-182-86.dsl.telesp.net.br anywhere DROP all -- 190.5.230.178 anywhere DROP all -- s4-163.gazduirejocuri.ro anywhere DROP all -- 206-248-138-44.dsl.teksavvy.com anywhere DROP all -- 12.236.34.135 anywhere DROP all -- 203.129.196.27 anywhere DROP all -- etr5.avf.hu anywhere DROP all -- abs-static-239.177.251.27.aircel.co.in anywhere DROP all -- h-74-3-121-10.snva.ca.megapath.net anywhere DROP all -- 192.241.70.95.dsl.static.turk.net anywhere DROP all -- 105-236-74-109.access.mtnbusiness.co.za anywhere DROP all -- 80.174.162.211.dyn.user.ono.com anywhere DROP all -- ll62-2-210-251-62.ll62.iam.net.ma anywhere DROP all -- 209-252-14-93.ip.mcleodusa.net anywhere DROP all -- microsoft02.dominiotemporarioidc.com anywhere DROP all -- 79.136.209.173 anywhere DROP all -- h200.7.141.67.dynamic.ip.windstream.net anywhere DROP all -- 122.155.0.68 anywhere DROP all -- alphacontrols.vianw.co.uk anywhere DROP all -- static-97-161-86-188.ipcom.comunitel.net anywhere DROP all -- 201.196.50.12 anywhere DROP all -- 91.82.88.231 anywhere DROP all -- 189.11.0.226 anywhere DROP all -- evrica-otchet.mv.ru anywhere DROP all -- adsl-dyn126.91-127-52.t-com.sk anywhere DROP all -- 222.239.255.35 anywhere DROP all -- localhost anywhere DROP all -- 38.99.82.191 anywhere DROP all -- 153.ezday.co.kr anywhere DROP all -- 83.222.230.90 anywhere DROP all -- vps3d220-ststic.vdrs.net anywhere DROP all -- host-93-104-250-18.allgaeudsl.de anywhere DROP all -- 162.13.11.254 anywhere DROP all -- static.vdc.vn anywhere Chain DENYOUT (1 references) target prot opt source destination DROP all -- anywhere 121.199.56.139 DROP all -- anywhere 250.ip-37-187-62.eu DROP all -- anywhere 176-31-115-73.ovh.net DROP all -- anywhere 112.ip-37-187-67.eu DROP all -- anywhere weblinux01.tecla.com.br DROP all -- anywhere 200.51.174.61.dial.wz.zj.dynamic.163data.com.cn DROP all -- anywhere 210.51.174.61.dial.wz.zj.dynamic.163data.com.cn DROP all -- anywhere ks3373898.kimsufi.com DROP all -- anywhere whl0094.whservidor.com DROP all -- anywhere www.sincreo.it DROP all -- anywhere bband-dyn140.178-41-243.t-com.sk DROP all -- anywhere 189-47-132-239.dsl.telesp.net.br DROP all -- anywhere dynamic.vdc.vn DROP all -- anywhere 68-188-72-60.static.stls.mo.charter.com DROP all -- anywhere 210.186.155.170 DROP all -- anywhere 173-14-48-145-Michigan.hfc.comcastbusiness.net DROP all -- anywhere p578bd5ec.dip0.t-ipconnect.de DROP all -- anywhere 232.Red-83-40-53.dynamicIP.rima-tde.net DROP all -- anywhere ks3289417.kimsufi.com DROP all -- anywhere 80.174.162.141.dyn.user.ono.com DROP all -- anywhere 190.85.26.37 DROP all -- anywhere wsip-174-79-39-4.ph.ph.cox.net DROP all -- anywhere ool-6038b4da.static.optonline.net DROP all -- anywhere host130.181-15-98.telecom.net.ar DROP all -- anywhere s208-180-21-173.bcstcmta02.clsttx.tl.sta.suddenlink.net DROP all -- anywhere host213-120-102-252.in-addr.btopenworld.com DROP all -- anywhere ool-4b7ff3d2.static.optonline.net DROP all -- anywhere mail.dati.com.tr DROP all -- anywhere 221.164.212.117 DROP all -- anywhere 75-151-145-195-Philadelphia.hfc.comcastbusiness.net DROP all -- anywhere adsl-074-165-019-209.sip.asm.bellsouth.net DROP all -- anywhere diagmed.cas.gvt.net.br DROP all -- anywhere cable-89-216-21-136.static.sbb.rs DROP all -- anywhere 122-146-1-206.static.sparqnet.net DROP all -- anywhere 82.114.80.154 DROP all -- anywhere h72-2-20-183.bigpipeinc.com DROP all -- anywhere 177-139-182-86.dsl.telesp.net.br DROP all -- anywhere 190.5.230.178 DROP all -- anywhere s4-163.gazduirejocuri.ro DROP all -- anywhere 206-248-138-44.dsl.teksavvy.com DROP all -- anywhere 12.236.34.135 DROP all -- anywhere 203.129.196.27 DROP all -- anywhere s-sql5.avf.hu DROP all -- anywhere abs-static-239.177.251.27.aircel.co.in DROP all -- anywhere h-74-3-121-10.snva.ca.megapath.net DROP all -- anywhere 192.241.70.95.dsl.static.turk.net DROP all -- anywhere 105-236-74-109.access.mtnbusiness.co.za DROP all -- anywhere 80.174.162.211.dyn.user.ono.com DROP all -- anywhere ll62-2-210-251-62.ll62.iam.net.ma DROP all -- anywhere 209-252-14-93.ip.mcleodusa.net DROP all -- anywhere microsoft02.dominiotemporarioidc.com DROP all -- anywhere 79.136.209.173 DROP all -- anywhere h200.7.141.67.dynamic.ip.windstream.net DROP all -- anywhere 122.155.0.68 DROP all -- anywhere alphacontrols.vianw.co.uk DROP all -- anywhere static-97-161-86-188.ipcom.comunitel.net DROP all -- anywhere 201.196.50.12 DROP all -- anywhere 91.82.88.231 DROP all -- anywhere 189.11.0.226 DROP all -- anywhere evrica-otchet.mv.ru DROP all -- anywhere adsl-dyn126.91-127-52.t-com.sk DROP all -- anywhere 222.239.255.35 DROP all -- anywhere localhost DROP all -- anywhere 38.99.82.191 DROP all -- anywhere 153.ezday.co.kr DROP all -- anywhere 83.222.230.90 DROP all -- anywhere vps3d220-ststic.vdrs.net DROP all -- anywhere host-93-104-250-18.allgaeudsl.de DROP all -- anywhere 162.13.11.254 DROP all -- anywhere static.vdc.vn Chain INVALID (2 references) target prot opt source destination INVDROP all -- anywhere anywhere ctstate INVALID INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN INVDROP tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST INVDROP tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST INVDROP tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN INVDROP tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH INVDROP tcp -- anywhere anywhere tcp flags:ACK,URG/URG INVDROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN ctstate NEW Chain INVDROP (10 references) target prot opt source destination DROP all -- anywhere anywhere Chain LOCALINPUT (1 references) target prot opt source destination ALLOWIN all -- anywhere anywhere DENYIN all -- anywhere anywhere Chain LOCALOUTPUT (1 references) target prot opt source destination ALLOWOUT all -- anywhere anywhere DENYOUT all -- anywhere anywhere Chain LOGDROPIN (1 references) target prot opt source destination DROP tcp -- anywhere anywhere tcp dpt:bootps DROP udp -- anywhere anywhere udp dpt:bootps DROP tcp -- anywhere anywhere tcp dpt:bootpc DROP udp -- anywhere anywhere udp dpt:bootpc DROP tcp -- anywhere anywhere tcp dpt:sunrpc DROP udp -- anywhere anywhere udp dpt:sunrpc DROP tcp -- anywhere anywhere tcp dpt:auth DROP udp -- anywhere anywhere udp dpt:auth DROP tcp -- anywhere anywhere tcp dpts:epmap:netbios-ssn DROP udp -- anywhere anywhere udp dpts:epmap:netbios-ssn DROP tcp -- anywhere anywhere tcp dpt:microsoft-ds DROP udp -- anywhere anywhere udp dpt:microsoft-ds DROP tcp -- anywhere anywhere tcp dpt:isakmp DROP udp -- anywhere anywhere udp dpt:isakmp DROP tcp -- anywhere anywhere tcp dpt:login DROP udp -- anywhere anywhere udp dpt:who DROP tcp -- anywhere anywhere tcp dpt:efs DROP udp -- anywhere anywhere udp dpt:router LOG tcp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *TCP_IN Blocked* ' LOG udp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *UDP_IN Blocked* ' LOG icmp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *ICMP_IN Blocked* ' DROP all -- anywhere anywhere Chain LOGDROPOUT (0 references) target prot opt source destination LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *TCP_OUT Blocked* ' LOG udp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *UDP_OUT Blocked* ' LOG icmp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *ICMP_OUT Blocked* ' DROP all -- anywhere anywhere Chain acctboth (2 references) target prot opt source destination tcp -- vps41334.ovh.net anywhere tcp dpt:http tcp -- anywhere vps41334.ovh.net tcp spt:http tcp -- vps41334.ovh.net anywhere tcp dpt:smtp tcp -- anywhere vps41334.ovh.net tcp spt:smtp tcp -- vps41334.ovh.net anywhere tcp dpt:pop3 tcp -- anywhere vps41334.ovh.net tcp spt:pop3 icmp -- vps41334.ovh.net anywhere icmp -- anywhere vps41334.ovh.net tcp -- vps41334.ovh.net anywhere tcp -- anywhere vps41334.ovh.net udp -- vps41334.ovh.net anywhere udp -- anywhere vps41334.ovh.net all -- vps41334.ovh.net anywhere all -- anywhere vps41334.ovh.net tcp -- 10.8.0.1 anywhere tcp dpt:http tcp -- anywhere 10.8.0.1 tcp spt:http tcp -- 10.8.0.1 anywhere tcp dpt:smtp tcp -- anywhere 10.8.0.1 tcp spt:smtp tcp -- 10.8.0.1 anywhere tcp dpt:pop3 tcp -- anywhere 10.8.0.1 tcp spt:pop3 icmp -- 10.8.0.1 anywhere icmp -- anywhere 10.8.0.1 tcp -- 10.8.0.1 anywhere tcp -- anywhere 10.8.0.1 udp -- 10.8.0.1 anywhere udp -- anywhere 10.8.0.1 all -- 10.8.0.1 anywhere all -- anywhere 10.8.0.1 all -- anywhere anywhere [/code] iptables -L -t nat : [code]Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination [/code] sestatus [code]SELinux status: disabled[/code]

if you want to redirect all traffic via vpn tunnel you must enable NAT on vpn server. Michael.

thanks maikcat how can i do it ?

[quote="maikcat"]if you want to redirect all traffic via vpn tunnel you must enable NAT on vpn server. Michael.[/quote] please tell me how can do this thanks

if I remove this code, internet working again but my ip address does not change! [quote="gozlan"]push "redirect-gateway def1 bypass-dhcp"[/quote] is that dns adress are correct, or I should put another adress? [quote="gozlan"] push "dhcp-option DNS 208.67.222.222" push "dhcp-option DNS 208.67.220.220" [/quote]

thanks debbie10t for response , I did all the changes you have asked me and one in the link but I still have the same problem look again my new configuration: client.ovpn [code]client dev tap dev tun proto udp remote 37.187.199.85 1194 resolv-retry infinite nobind persist-key persist-tun ca "C://keys//ca.crt" cert "C://keys//client1.crt" key "C://keys//client1.key" ns-cert-type server comp-lzo verb 3 push "dhcp-option DNS 10.8.0.6" redirect-gateway[/code] server.conf [code]local 37.187.199.85 port 1194 proto udp dev tap dev tun ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh2048.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1 bypass-dhcp" log /etc/openvpn/server.log push "dhcp-option dns 8.8.8.8" push "dhcp-option DNS 208.67.222.222" push "dhcp-option DNS 208.67.220.220" client-to-client keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 [/code] log client : [code]Thu Mar 06 23:41:14 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011 Thu Mar 06 23:41:14 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Thu Mar 06 23:41:14 2014 LZO compression initialized Thu Mar 06 23:41:14 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Thu Mar 06 23:41:14 2014 Socket Buffers: R=[8192->8192] S=[65536->65536] Thu Mar 06 23:41:14 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu Mar 06 23:41:14 2014 Local Options hash (VER=V4): '41690919' Thu Mar 06 23:41:14 2014 Expected Remote Options hash (VER=V4): '530fdded' Thu Mar 06 23:41:14 2014 UDPv4 link local: [undef] Thu Mar 06 23:41:14 2014 UDPv4 link remote: 37.187.199.85:1194 Thu Mar 06 23:41:14 2014 TLS: Initial packet from 37.187.199.85:1194, sid=15addd11 4cc53d40 Thu Mar 06 23:41:17 2014 VERIFY OK: depth=1, /C=fr/ST=fr/L=paris/O=meg_web_synergie/OU=fr/CN=Meg_web_synegie_CA/name=EasyRSA/emailAddress=chaker.info@gmail.com Thu Mar 06 23:41:17 2014 VERIFY OK: nsCertType=SERVER Thu Mar 06 23:41:17 2014 VERIFY OK: depth=0, /C=fr/ST=FR/L=Paris/O=Meg_web_synegie/OU=FR/CN=server/name=EasyRSA/emailAddress=m_gozlan@hotmail.com Thu Mar 06 23:41:18 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Mar 06 23:41:18 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Mar 06 23:41:18 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Mar 06 23:41:18 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Mar 06 23:41:18 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Thu Mar 06 23:41:18 2014 [server] Peer Connection Initiated with 37.187.199.85:1194 Thu Mar 06 23:41:20 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Thu Mar 06 23:41:20 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option dns 8.8.8.8,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' Thu Mar 06 23:41:20 2014 Options error: --dhcp-option: unknown option type 'dns' or missing parameter Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: timers and/or timeouts modified Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: --ifconfig/up options modified Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: route options modified Thu Mar 06 23:41:20 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Thu Mar 06 23:41:20 2014 ROUTE default_gateway=192.168.1.1 Thu Mar 06 23:41:20 2014 TAP-WIN32 device [Connexion au r??seau local 8] opened: \\.\Global\{24794FFD-B116-41A2-ABC5-24E97B7083FC}.tap Thu Mar 06 23:41:20 2014 TAP-Win32 Driver Version 9.9 Thu Mar 06 23:41:20 2014 TAP-Win32 MTU=1500 Thu Mar 06 23:41:20 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {24794FFD-B116-41A2-ABC5-24E97B7083FC} [DHCP-serv: 10.8.0.5, lease-time: 31536000] Thu Mar 06 23:41:20 2014 Successful ARP Flush on interface [36] {24794FFD-B116-41A2-ABC5-24E97B7083FC} Thu Mar 06 23:41:25 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 37.187.199.85 MASK 255.255.255.255 192.168.1.1 Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4 Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive] Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5 Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive] Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5 Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive] Thu Mar 06 23:41:25 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5 Thu Mar 06 23:41:25 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Thu Mar 06 23:41:25 2014 Route addition via IPAPI succeeded [adaptive] Thu Mar 06 23:41:25 2014 Initialization Sequence Completed Thu Mar 06 23:41:46 2014 TCP/UDP: Closing socket Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.5 Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive] Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 37.187.199.85 MASK 255.255.255.255 192.168.1.1 Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive] Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5 Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive] Thu Mar 06 23:41:46 2014 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5 Thu Mar 06 23:41:46 2014 Route deletion via IPAPI succeeded [adaptive] Thu Mar 06 23:41:46 2014 Closing TUN/TAP interface Thu Mar 06 23:41:46 2014 SIGTERM[hard,] received, process exiting [/code] log server : [code]Thu Mar 6 23:41:02 2014 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013 Thu Mar 6 23:41:02 2014 Diffie-Hellman initialized with 2048 bit key Thu Mar 6 23:41:02 2014 Socket Buffers: R=[212992->131072] S=[212992->131072] Thu Mar 6 23:41:02 2014 ROUTE_GATEWAY 37.187.199.254/255.255.255.0 IFACE=eth0 HWADDR=02:00:25:bb:c7:55 Thu Mar 6 23:41:02 2014 TUN/TAP device tun0 opened Thu Mar 6 23:41:02 2014 TUN/TAP TX queue length set to 100 Thu Mar 6 23:41:02 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu Mar 6 23:41:02 2014 /sbin/ip link set dev tun0 up mtu 1500 Thu Mar 6 23:41:02 2014 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2 Thu Mar 6 23:41:02 2014 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2 Thu Mar 6 23:41:02 2014 UDPv4 link local (bound): [AF_INET]37.187.199.85:1194 Thu Mar 6 23:41:02 2014 UDPv4 link remote: [undef] Thu Mar 6 23:41:02 2014 MULTI: multi_init called, r=256 v=256 Thu Mar 6 23:41:02 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Thu Mar 6 23:41:02 2014 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6 Thu Mar 6 23:41:02 2014 succeeded -> ifconfig_pool_set() Thu Mar 6 23:41:02 2014 IFCONFIG POOL LIST Thu Mar 6 23:41:02 2014 client1,10.8.0.4 Thu Mar 6 23:41:02 2014 Initialization Sequence Completed Thu Mar 6 23:41:16 2014 197.27.40.64:60288 TLS: Initial packet from [AF_INET]197.27.40.64:60288, sid=9a86a184 558abc18 Thu Mar 6 23:41:19 2014 197.27.40.64:60288 VERIFY OK: depth=1, C=fr, ST=fr, L=paris, O=meg web synergie, OU=fr, CN=Meg web synegie CA, name=EasyRSA, emailAddress=chaker.info@gmail.com Thu Mar 6 23:41:19 2014 197.27.40.64:60288 VERIFY OK: depth=0, C=fr, ST=fr, L=paris, O=Meg web synergie, OU=fr, CN=client1, name=EasyRSA, emailAddress=chaker.info@gmail.com Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Mar 6 23:41:19 2014 197.27.40.64:60288 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Mar 6 23:41:20 2014 197.27.40.64:60288 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Thu Mar 6 23:41:20 2014 197.27.40.64:60288 [client1] Peer Connection Initiated with [AF_INET]197.27.40.64:60288 Thu Mar 6 23:41:20 2014 client1/197.27.40.64:60288 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled) Thu Mar 6 23:41:20 2014 client1/197.27.40.64:60288 MULTI: Learn: 10.8.0.6 -> client1/197.27.40.64:60288 Thu Mar 6 23:41:20 2014 client1/197.27.40.64:60288 MULTI: primary virtual IP for client1/197.27.40.64:60288: 10.8.0.6 Thu Mar 6 23:41:22 2014 client1/197.27.40.64:60288 PUSH: Received control message: 'PUSH_REQUEST' Thu Mar 6 23:41:22 2014 client1/197.27.40.64:60288 send_push_reply(): safe_cap=940 Thu Mar 6 23:41:22 2014 client1/197.27.40.64:60288 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option dns 8.8.8.8,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1) Thu Mar 6 23:42:53 2014 79.183.226.172:54933 TLS: Initial packet from [AF_INET]79.183.226.172:54933, sid=40387c6f 52477e42 Thu Mar 6 23:42:54 2014 79.183.226.172:54933 VERIFY OK: depth=1, C=fr, ST=fr, L=paris, O=meg web synergie, OU=fr, CN=Meg web synegie CA, name=EasyRSA, emailAddress=chaker.info@gmail.com Thu Mar 6 23:42:54 2014 79.183.226.172:54933 VERIFY OK: depth=0, C=fr, ST=fr, L=paris, O=Meg web synergie, OU=fr, CN=client1, name=EasyRSA, emailAddress=chaker.info@gmail.com Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Mar 6 23:42:55 2014 79.183.226.172:54933 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Thu Mar 6 23:42:55 2014 79.183.226.172:54933 [client1] Peer Connection Initiated with [AF_INET]79.183.226.172:54933 Thu Mar 6 23:42:55 2014 MULTI: new connection by client 'client1' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect. Thu Mar 6 23:42:55 2014 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled) Thu Mar 6 23:42:55 2014 MULTI: Learn: 10.8.0.6 -> client1/79.183.226.172:54933 Thu Mar 6 23:42:55 2014 MULTI: primary virtual IP for client1/79.183.226.172:54933: 10.8.0.6 Thu Mar 6 23:42:57 2014 client1/79.183.226.172:54933 PUSH: Received control message: 'PUSH_REQUEST' Thu Mar 6 23:42:57 2014 client1/79.183.226.172:54933 send_push_reply(): safe_cap=940 Thu Mar 6 23:42:57 2014 client1/79.183.226.172:54933 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option dns 8.8.8.8,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1) [/code] iptables -L -t nat : [code]Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination RETURN tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mailman RETURN tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mail RETURN tcp -- anywhere localhost.localdomain multiport dports smtp,urd,submission owner UID match cpanel RETURN tcp -- anywhere anywhere multiport dports smtp,urd,submission owner UID match root REDIRECT tcp -- anywhere anywhere multiport dports smtp,urd,submission Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- anywhere anywhere to:37.187.199.85 MASQUERADE all -- anywhere anywhere MASQUERADE all -- 10.8.0.0/24 anywhere SNAT all -- 1.2.4.0/24 anywhere to:37.187.199.85 MASQUERADE all -- 1.2.4.0/24 anywhere MASQUERADE all -- anywhere anywhere MASQUERADE all -- 10.8.0.0/24 anywhere MASQUERADE all -- 10.8.0.0/24 anywhere MASQUERADE all -- 10.8.0.0/24 anywhere [/code] sestatus : [code]SELinux status: disabled[/code] iptables -L : [code]Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere acctboth all -- anywhere anywhere ACCEPT tcp -- cdns.ovh.net anywhere tcp dpt:domain ACCEPT udp -- cdns.ovh.net anywhere udp dpt:domain ACCEPT tcp -- cdns.ovh.net anywhere tcp spt:domain ACCEPT udp -- cdns.ovh.net anywhere udp spt:domain LOCALINPUT all -- anywhere anywhere ACCEPT all -- anywhere anywhere INVALID tcp -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:domain ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:imap ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:urd ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:submission ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:imaps ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3s ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:tsrmagt ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:tpcsrvr ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:infowave ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:radsec ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:gnunet ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:eli ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nbx-ser ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nbx-dir ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:openvpn ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp-data ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:domain ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:openvpn ACCEPT icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp echo-reply limit: avg 1/sec burst 5 ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp destination-unreachable LOGDROPIN all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mailman ACCEPT tcp -- anywhere anywhere multiport dports smtp,urd,submission owner GID match mail ACCEPT tcp -- anywhere localhost.localdomain multiport dports smtp,urd,submission owner UID match cpanel ACCEPT tcp -- anywhere anywhere multiport dports smtp,urd,submission owner UID match root acctboth all -- anywhere anywhere ACCEPT tcp -- anywhere cdns.ovh.net tcp dpt:domain ACCEPT udp -- anywhere cdns.ovh.net udp dpt:domain ACCEPT tcp -- anywhere cdns.ovh.net tcp spt:domain ACCEPT udp -- anywhere cdns.ovh.net udp spt:domain LOCALOUTPUT all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp spt:domain ACCEPT udp -- anywhere anywhere udp spt:domain ACCEPT all -- anywhere anywhere INVALID tcp -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:time ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:nicname ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:domain ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:auth ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:submission ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:rsync ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:gnunet ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:eli ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:sep ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:sms-chat ACCEPT tcp -- anywhere anywhere ctstate NEW tcp dpt:openvpn ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp-data ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ftp ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:domain ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:auth ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:ntp ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:rsync ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:6277 ACCEPT udp -- anywhere anywhere ctstate NEW udp dpt:openvpn ACCEPT icmp -- anywhere anywhere icmp echo-reply ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp destination-unreachable DROP all -- anywhere anywhere Chain ALLOWIN (1 references) target prot opt source destination ACCEPT all -- sge91-1-82-234-15-56.fbx.proxad.net anywhere ACCEPT all -- 41.230.239.88 anywhere Chain ALLOWOUT (1 references) target prot opt source destination ACCEPT all -- anywhere sge91-1-82-234-15-56.fbx.proxad.net ACCEPT all -- anywhere 41.230.239.88 Chain DENYIN (1 references) target prot opt source destination DROP all -- 121.199.56.139 anywhere DROP all -- 250.ip-37-187-62.eu anywhere DROP all -- 176-31-115-73.ovh.net anywhere DROP all -- 112.ip-37-187-67.eu anywhere DROP all -- weblinux01.tecla.com.br anywhere DROP all -- 200.51.174.61.dial.wz.zj.dynamic.163data.com.cn anywhere DROP all -- 210.51.174.61.dial.wz.zj.dynamic.163data.com.cn anywhere DROP all -- ks3373898.kimsufi.com anywhere DROP all -- whl0094.whservidor.com anywhere DROP all -- 80.247.72.57 anywhere DROP all -- bband-dyn140.178-41-243.t-com.sk anywhere DROP all -- 189-47-132-239.dsl.telesp.net.br anywhere DROP all -- dynamic.vdc.vn anywhere DROP all -- 68-188-72-60.static.stls.mo.charter.com anywhere DROP all -- 210.186.155.170 anywhere DROP all -- 173-14-48-145-Michigan.hfc.comcastbusiness.net anywhere DROP all -- p578bd5ec.dip0.t-ipconnect.de anywhere DROP all -- 232.Red-83-40-53.dynamicIP.rima-tde.net anywhere DROP all -- ks3289417.kimsufi.com anywhere DROP all -- 80.174.162.141.dyn.user.ono.com anywhere DROP all -- 190.85.26.37 anywhere DROP all -- wsip-174-79-39-4.ph.ph.cox.net anywhere DROP all -- ool-6038b4da.static.optonline.net anywhere DROP all -- host130.181-15-98.telecom.net.ar anywhere DROP all -- s208-180-21-173.bcstcmta02.clsttx.tl.sta.suddenlink.net anywhere DROP all -- host213-120-102-252.in-addr.btopenworld.com anywhere DROP all -- ool-4b7ff3d2.static.optonline.net anywhere DROP all -- mail.dati.com.tr anywhere DROP all -- 221.164.212.117 anywhere DROP all -- 75-151-145-195-Philadelphia.hfc.comcastbusiness.net anywhere DROP all -- adsl-074-165-019-209.sip.asm.bellsouth.net anywhere DROP all -- diagmed.cas.gvt.net.br anywhere DROP all -- cable-89-216-21-136.static.sbb.rs anywhere DROP all -- 122-146-1-206.static.sparqnet.net anywhere DROP all -- 82.114.80.154 anywhere DROP all -- h72-2-20-183.bigpipeinc.com anywhere DROP all -- 177-139-182-86.dsl.telesp.net.br anywhere DROP all -- 190.5.230.178 anywhere DROP all -- s4-163.gazduirejocuri.ro anywhere DROP all -- 206-248-138-44.dsl.teksavvy.com anywhere DROP all -- 12.236.34.135 anywhere DROP all -- 203.129.196.27 anywhere DROP all -- etr5.avf.hu anywhere DROP all -- abs-static-239.177.251.27.aircel.co.in anywhere DROP all -- h-74-3-121-10.snva.ca.megapath.net anywhere DROP all -- 192.241.70.95.dsl.static.turk.net anywhere DROP all -- 105-236-74-109.access.mtnbusiness.co.za anywhere DROP all -- 80.174.162.211.dyn.user.ono.com anywhere DROP all -- ll62-2-210-251-62.ll62.iam.net.ma anywhere DROP all -- 209-252-14-93.ip.mcleodusa.net anywhere DROP all -- microsoft02.dominiotemporarioidc.com anywhere DROP all -- 79.136.209.173 anywhere DROP all -- h200.7.141.67.dynamic.ip.windstream.net anywhere DROP all -- 122.155.0.68 anywhere DROP all -- alphacontrols.vianw.co.uk anywhere DROP all -- static-97-161-86-188.ipcom.comunitel.net anywhere DROP all -- 201.196.50.12 anywhere DROP all -- 91.82.88.231 anywhere DROP all -- 189.11.0.226 anywhere DROP all -- evrica-otchet.mv.ru anywhere DROP all -- adsl-dyn126.91-127-52.t-com.sk anywhere DROP all -- 222.239.255.35 anywhere DROP all -- localhost anywhere DROP all -- 38.99.82.191 anywhere DROP all -- 153.ezday.co.kr anywhere DROP all -- 83.222.230.90 anywhere DROP all -- vps3d220-ststic.vdrs.net anywhere DROP all -- host-93-104-250-18.allgaeudsl.de anywhere DROP all -- 162.13.11.254 anywhere DROP all -- static.vdc.vn anywhere DROP all -- 58.247.84.219 anywhere DROP all -- v39373.1blu.de anywhere DROP all -- 195.54.2.11 anywhere DROP all -- 109.120.173.172.addr.datapoint.ru anywhere DROP all -- srv445.sd-france.net anywhere DROP all -- 203.248.143.169 anywhere DROP all -- 178.163.25.184 anywhere DROP all -- 48.151.57.37.triolan.net anywhere DROP all -- hst-12-151.fibermax.bg anywhere Chain DENYOUT (1 references) target prot opt source destination DROP all -- anywhere 121.199.56.139 DROP all -- anywhere 250.ip-37-187-62.eu DROP all -- anywhere 176-31-115-73.ovh.net DROP all -- anywhere 112.ip-37-187-67.eu DROP all -- anywhere weblinux01.tecla.com.br DROP all -- anywhere 200.51.174.61.dial.wz.zj.dynamic.163data.com.cn DROP all -- anywhere 210.51.174.61.dial.wz.zj.dynamic.163data.com.cn DROP all -- anywhere ks3373898.kimsufi.com DROP all -- anywhere whl0094.whservidor.com DROP all -- anywhere 80.247.72.57 DROP all -- anywhere bband-dyn140.178-41-243.t-com.sk DROP all -- anywhere 189-47-132-239.dsl.telesp.net.br DROP all -- anywhere dynamic.vdc.vn DROP all -- anywhere 68-188-72-60.static.stls.mo.charter.com DROP all -- anywhere 210.186.155.170 DROP all -- anywhere 173-14-48-145-Michigan.hfc.comcastbusiness.net DROP all -- anywhere p578bd5ec.dip0.t-ipconnect.de DROP all -- anywhere 232.Red-83-40-53.dynamicIP.rima-tde.net DROP all -- anywhere ks3289417.kimsufi.com DROP all -- anywhere 80.174.162.141.dyn.user.ono.com DROP all -- anywhere 190.85.26.37 DROP all -- anywhere wsip-174-79-39-4.ph.ph.cox.net DROP all -- anywhere ool-6038b4da.static.optonline.net DROP all -- anywhere host130.181-15-98.telecom.net.ar DROP all -- anywhere s208-180-21-173.bcstcmta02.clsttx.tl.sta.suddenlink.net DROP all -- anywhere host213-120-102-252.in-addr.btopenworld.com DROP all -- anywhere ool-4b7ff3d2.static.optonline.net DROP all -- anywhere mail.dati.com.tr DROP all -- anywhere 221.164.212.117 DROP all -- anywhere 75-151-145-195-Philadelphia.hfc.comcastbusiness.net DROP all -- anywhere adsl-074-165-019-209.sip.asm.bellsouth.net DROP all -- anywhere diagmed.cas.gvt.net.br DROP all -- anywhere cable-89-216-21-136.static.sbb.rs DROP all -- anywhere 122-146-1-206.static.sparqnet.net DROP all -- anywhere 82.114.80.154 DROP all -- anywhere h72-2-20-183.bigpipeinc.com DROP all -- anywhere 177-139-182-86.dsl.telesp.net.br DROP all -- anywhere 190.5.230.178 DROP all -- anywhere s4-163.gazduirejocuri.ro DROP all -- anywhere 206-248-138-44.dsl.teksavvy.com DROP all -- anywhere 12.236.34.135 DROP all -- anywhere 203.129.196.27 DROP all -- anywhere s-sql5.avf.hu DROP all -- anywhere abs-static-239.177.251.27.aircel.co.in DROP all -- anywhere h-74-3-121-10.snva.ca.megapath.net DROP all -- anywhere 192.241.70.95.dsl.static.turk.net DROP all -- anywhere 105-236-74-109.access.mtnbusiness.co.za DROP all -- anywhere 80.174.162.211.dyn.user.ono.com DROP all -- anywhere ll62-2-210-251-62.ll62.iam.net.ma DROP all -- anywhere 209-252-14-93.ip.mcleodusa.net DROP all -- anywhere microsoft02.dominiotemporarioidc.com DROP all -- anywhere 79.136.209.173 DROP all -- anywhere h200.7.141.67.dynamic.ip.windstream.net DROP all -- anywhere 122.155.0.68 DROP all -- anywhere alphacontrols.vianw.co.uk DROP all -- anywhere static-97-161-86-188.ipcom.comunitel.net DROP all -- anywhere 201.196.50.12 DROP all -- anywhere 91.82.88.231 DROP all -- anywhere 189.11.0.226 DROP all -- anywhere evrica-otchet.mv.ru DROP all -- anywhere adsl-dyn126.91-127-52.t-com.sk DROP all -- anywhere 222.239.255.35 DROP all -- anywhere localhost DROP all -- anywhere 38.99.82.191 DROP all -- anywhere 153.ezday.co.kr DROP all -- anywhere 83.222.230.90 DROP all -- anywhere vps3d220-ststic.vdrs.net DROP all -- anywhere host-93-104-250-18.allgaeudsl.de DROP all -- anywhere 162.13.11.254 DROP all -- anywhere static.vdc.vn DROP all -- anywhere 58.247.84.219 DROP all -- anywhere v39373.1blu.de DROP all -- anywhere 195.54.2.11 DROP all -- anywhere 109.120.173.172.addr.datapoint.ru DROP all -- anywhere srv445.sd-france.net DROP all -- anywhere 203.248.143.169 DROP all -- anywhere 178.163.25.184 DROP all -- anywhere 48.151.57.37.triolan.net DROP all -- anywhere hst-12-151.fibermax.bg Chain INVALID (2 references) target prot opt source destination INVDROP all -- anywhere anywhere ctstate INVALID INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG INVDROP tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN INVDROP tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST INVDROP tcp -- anywhere anywhere tcp flags:FIN,RST/FIN,RST INVDROP tcp -- anywhere anywhere tcp flags:FIN,ACK/FIN INVDROP tcp -- anywhere anywhere tcp flags:PSH,ACK/PSH INVDROP tcp -- anywhere anywhere tcp flags:ACK,URG/URG INVDROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN ctstate NEW Chain INVDROP (10 references) target prot opt source destination DROP all -- anywhere anywhere Chain LOCALINPUT (1 references) target prot opt source destination ALLOWIN all -- anywhere anywhere DENYIN all -- anywhere anywhere Chain LOCALOUTPUT (1 references) target prot opt source destination ALLOWOUT all -- anywhere anywhere DENYOUT all -- anywhere anywhere Chain LOGDROPIN (1 references) target prot opt source destination DROP tcp -- anywhere anywhere tcp dpt:bootps DROP udp -- anywhere anywhere udp dpt:bootps DROP tcp -- anywhere anywhere tcp dpt:bootpc DROP udp -- anywhere anywhere udp dpt:bootpc DROP tcp -- anywhere anywhere tcp dpt:sunrpc DROP udp -- anywhere anywhere udp dpt:sunrpc DROP tcp -- anywhere anywhere tcp dpt:auth DROP udp -- anywhere anywhere udp dpt:auth DROP tcp -- anywhere anywhere tcp dpts:epmap:netbios-ssn DROP udp -- anywhere anywhere udp dpts:epmap:netbios-ssn DROP tcp -- anywhere anywhere tcp dpt:microsoft-ds DROP udp -- anywhere anywhere udp dpt:microsoft-ds DROP tcp -- anywhere anywhere tcp dpt:isakmp DROP udp -- anywhere anywhere udp dpt:isakmp DROP tcp -- anywhere anywhere tcp dpt:login DROP udp -- anywhere anywhere udp dpt:who DROP tcp -- anywhere anywhere tcp dpt:efs DROP udp -- anywhere anywhere udp dpt:router LOG tcp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *TCP_IN Blocked* ' LOG udp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *UDP_IN Blocked* ' LOG icmp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning prefix `Firewall: *ICMP_IN Blocked* ' DROP all -- anywhere anywhere Chain LOGDROPOUT (0 references) target prot opt source destination LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *TCP_OUT Blocked* ' LOG udp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *UDP_OUT Blocked* ' LOG icmp -- anywhere anywhere limit: avg 30/min burst 5 LOG level warning uid prefix `Firewall: *ICMP_OUT Blocked* ' DROP all -- anywhere anywhere Chain acctboth (2 references) target prot opt source destination tcp -- vps41334.ovh.net anywhere tcp dpt:http tcp -- anywhere vps41334.ovh.net tcp spt:http tcp -- vps41334.ovh.net anywhere tcp dpt:smtp tcp -- anywhere vps41334.ovh.net tcp spt:smtp tcp -- vps41334.ovh.net anywhere tcp dpt:pop3 tcp -- anywhere vps41334.ovh.net tcp spt:pop3 icmp -- vps41334.ovh.net anywhere icmp -- anywhere vps41334.ovh.net tcp -- vps41334.ovh.net anywhere tcp -- anywhere vps41334.ovh.net udp -- vps41334.ovh.net anywhere udp -- anywhere vps41334.ovh.net all -- vps41334.ovh.net anywhere all -- anywhere vps41334.ovh.net tcp -- 10.8.0.1 anywhere tcp dpt:http tcp -- anywhere 10.8.0.1 tcp spt:http tcp -- 10.8.0.1 anywhere tcp dpt:smtp tcp -- anywhere 10.8.0.1 tcp spt:smtp tcp -- 10.8.0.1 anywhere tcp dpt:pop3 tcp -- anywhere 10.8.0.1 tcp spt:pop3 icmp -- 10.8.0.1 anywhere icmp -- anywhere 10.8.0.1 tcp -- 10.8.0.1 anywhere tcp -- anywhere 10.8.0.1 udp -- 10.8.0.1 anywhere udp -- anywhere 10.8.0.1 all -- 10.8.0.1 anywhere all -- anywhere 10.8.0.1 all -- anywhere anywhere [/code]

can't access in http request when i connect with openvpn

maikcat

with firewall DOWN on openvpn server and with NAT rule enabled test:

run nslookup on client and report if proper dns entries are displayed,then try to query them

do a tracert 8.8.8.8 and post the result.

Michael.

« Previous Page