VPN connects successfully,cause ConnectionTimeout in browser

qprogrammer

Hello

Iv installed OpenVPN on my server. I am able to connect to it successfully but when i got no internet access when its connected and i get Connection Timeout error in browser.

Can anyone help me please?
here are my config files and log :

Server Config :

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /etc/openvpn/openvpn-auth-pam.so /etc/pam.d/login
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #-
#Uncomment this line if you are using FreeRADIUS
client-cert-not-required
#username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "route 10.8.0.0 255.255.255.0"
push "redirect-gateway def1"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

Client Config

client
dev tun
proto udp
remote 74.86.xxx.xxx 1194 # - Your server IP and OpenVPN Port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca2.crt
auth-user-pass
comp-lzo
reneg-sec 0
verb 3

Client Log

Wed Apr 16 15:19:03 2014 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Wed Apr 16 15:19:03 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Wed Apr 16 15:19:03 2014 Need hold release from management interface, waiting...
Wed Apr 16 15:19:04 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Wed Apr 16 15:19:04 2014 MANAGEMENT: CMD 'state on'
Wed Apr 16 15:19:04 2014 MANAGEMENT: CMD 'log all on'
Wed Apr 16 15:19:04 2014 MANAGEMENT: CMD 'hold off'
Wed Apr 16 15:19:04 2014 MANAGEMENT: CMD 'hold release'
Wed Apr 16 15:19:04 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Apr 16 15:19:04 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Apr 16 15:19:04 2014 UDPv4 link local: [undef]
Wed Apr 16 15:19:04 2014 UDPv4 link remote: [AF_INET]74.86.xxx.xxx:1194
Wed Apr 16 15:19:04 2014 MANAGEMENT: >STATE:1397645344,WAIT,,,
Wed Apr 16 15:19:05 2014 MANAGEMENT: >STATE:1397645345,AUTH,,,
Wed Apr 16 15:19:05 2014 TLS: Initial packet from [AF_INET]74.86.xxx.xxx:1194, sid=319e0445 bed38aae
Wed Apr 16 15:19:05 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Apr 16 15:19:09 2014 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=HowardServer, name=changeme, emailAddress=mail@host.domain
Wed Apr 16 15:19:09 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=HowardServer, emailAddress=mail@host.domain
Wed Apr 16 15:19:21 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 16 15:19:21 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 15:19:21 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 16 15:19:21 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 16 15:19:21 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Apr 16 15:19:21 2014 [server] Peer Connection Initiated with [AF_INET]74.86.xxx.xxx:1194
Wed Apr 16 15:19:22 2014 MANAGEMENT: >STATE:1397645362,GET_CONFIG,,,
Wed Apr 16 15:19:23 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Apr 16 15:19:24 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,redirect-gateway def1,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.14 10.8.0.13'
Wed Apr 16 15:19:24 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Apr 16 15:19:24 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Apr 16 15:19:24 2014 OPTIONS IMPORT: route options modified
Wed Apr 16 15:19:24 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Apr 16 15:19:24 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 16 15:19:24 2014 MANAGEMENT: >STATE:1397645364,ASSIGN_IP,,10.8.0.14,
Wed Apr 16 15:19:24 2014 open_tun, tt->ipv6=0
Wed Apr 16 15:19:24 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{2B43B7B7-5D91-4BE5-BAEF-48B9CFCDF3B3}.tap
Wed Apr 16 15:19:24 2014 TAP-Windows Driver Version 9.9 
Wed Apr 16 15:19:24 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.14/255.255.255.252 on interface {2B43B7B7-5D91-4BE5-BAEF-48B9CFCDF3B3} [DHCP-serv: 10.8.0.13, lease-time: 31536000]
Wed Apr 16 15:19:24 2014 Successful ARP Flush on interface [18] {2B43B7B7-5D91-4BE5-BAEF-48B9CFCDF3B3}
Wed Apr 16 15:19:29 2014 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Wed Apr 16 15:19:29 2014 C:\Windows\system32\route.exe ADD 74.86.xxx.xxxMASK 255.255.255.255 192.168.1.1
Wed Apr 16 15:19:29 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Wed Apr 16 15:19:29 2014 Route addition via IPAPI succeeded [adaptive]
Wed Apr 16 15:19:29 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.13
Wed Apr 16 15:19:29 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Apr 16 15:19:29 2014 Route addition via IPAPI succeeded [adaptive]
Wed Apr 16 15:19:29 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.13
Wed Apr 16 15:19:29 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Apr 16 15:19:29 2014 Route addition via IPAPI succeeded [adaptive]
Wed Apr 16 15:19:29 2014 MANAGEMENT: >STATE:1397645369,ADD_ROUTES,,,
Wed Apr 16 15:19:29 2014 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.13
Wed Apr 16 15:19:29 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Apr 16 15:19:29 2014 Route addition via IPAPI succeeded [adaptive]
Wed Apr 16 15:19:29 2014 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.13
Wed Apr 16 15:19:29 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Apr 16 15:19:29 2014 Route addition via IPAPI succeeded [adaptive]
Wed Apr 16 15:19:29 2014 Initialization Sequence Completed
Wed Apr 16 15:19:29 2014 MANAGEMENT: >STATE:1397645369,CONNECTED,SUCCESS,10.8.0.14,74.86.xxx.xxx

Thanks

qprogrammer

debbie10t wroteHave you read this HOWTO: Routing all client traffic (including web-traffic) through the VPN ?

Yes, that's why i added push "redirect-gateway def1" to my server config.

Have you enabled ip_forwarding and nat on the server ?

Yes, i set net.ipv4.ip_forward to 1 in /etc/sysctl.conf file

I also used this command to enable nat :

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

That is correct, right? my server is dedicated with Red hat Enterprise

Anything else i can check?

qprogrammer

Solved.

Problem was that i enabled Nat for eth0 which apparently was not my internet interface.

So i enabled it for eth1 and problem solved.

i used ifconfig command to see my network interfaces.
then enabled nat for eth1 :

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth1 -j MASQUERADE

hope it helps someone, however its a rare situation i think.