Hi, I am configuring openvpn on a vps. You can find details about all the configuration in a previous question I posted on stackoverflow:
http://stackoverflow.com/questions/23711147/openvpn-iptables-not-forwarding-traffic (ignore the INPUT chain).
I solved the forwarding problem, as now I am able to forward traffic when connected to the openvpn server from a windows client using openvpn-gui. I can surf the internet through the vpn and my ip address is registered as that of the server instead of my own.
However, if I start a game client, say league of legends, it cannot connect to the game server. But no ports are blocked and the default policy for everything is allow. How can that be? Game used ports are the following:
5000 - 5500 UDP - League of Legends Game Client
8393 - 8400 TCP - Patcher and Maestro
2099 TCP - PVP.Net
5223 TCP - PVP.Net
5222 TCP - PVP.Net
80 TCP - HTTP Connections
443 TCP - HTTPS Connections
Log:
Fri May 23 10:37:38 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Fri May 23 10:37:38 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Fri May 23 10:37:38 2014 Need hold release from management interface, waiting...
Fri May 23 10:37:38 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Fri May 23 10:37:38 2014 MANAGEMENT: CMD 'state on'
Fri May 23 10:37:38 2014 MANAGEMENT: CMD 'log all on'
Fri May 23 10:37:38 2014 MANAGEMENT: CMD 'hold off'
Fri May 23 10:37:38 2014 MANAGEMENT: CMD 'hold release'
Fri May 23 10:37:38 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri May 23 10:37:39 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 23 10:37:39 2014 UDPv4 link local: [undef]
Fri May 23 10:37:39 2014 UDPv4 link remote: [AF_INET]my-server-ip:1194
Fri May 23 10:37:39 2014 MANAGEMENT: >STATE:1400834259,WAIT,,,
Fri May 23 10:37:39 2014 MANAGEMENT: >STATE:1400834259,AUTH,,,
Fri May 23 10:37:39 2014 TLS: Initial packet from [AF_INET]my-server-ip:1194, sid=79b0d63b 4192c591
Fri May 23 10:37:39 2014 VERIFY OK: depth=1, C=IT, ST=MI, L=Milano, O=Ariafritta, OU=Ariafritta, CN=Ariafritta, name=Ariafritta, emailAddress=nicolo1990@yahoo.it
Fri May 23 10:37:39 2014 VERIFY OK: depth=0, C=IT, ST=MI, L=Milano, O=Ariafritta, OU=Ariafritta, CN=server, name=Ariafritta, emailAddress=nicolo1990@yahoo.it
Fri May 23 10:37:39 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 23 10:37:39 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 23 10:37:39 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 23 10:37:39 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 23 10:37:39 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 23 10:37:39 2014 [server] Peer Connection Initiated with [AF_INET]my-server-ip:1194
Fri May 23 10:37:40 2014 MANAGEMENT: >STATE:1400834260,GET_CONFIG,,,
Fri May 23 10:37:42 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri May 23 10:37:42 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,route 10.9.8.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.9.8.6 10.9.8.5'
Fri May 23 10:37:42 2014 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 23 10:37:42 2014 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 23 10:37:42 2014 OPTIONS IMPORT: route options modified
Fri May 23 10:37:42 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri May 23 10:37:42 2014 MANAGEMENT: >STATE:1400834262,ASSIGN_IP,,10.9.8.6,
Fri May 23 10:37:42 2014 open_tun, tt->ipv6=0
Fri May 23 10:37:42 2014 TAP-WIN32 device [Connessione alla rete locale (LAN) 2] opened: \\.\Global\{EB1B6359-E90E-4E47-9F33-DDA5B5C50174}.tap
Fri May 23 10:37:42 2014 TAP-Windows Driver Version 9.9
Fri May 23 10:37:42 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.8.6/255.255.255.252 on interface {EB1B6359-E90E-4E47-9F33-DDA5B5C50174} [DHCP-serv: 10.9.8.5, lease-time: 31536000]
Fri May 23 10:37:42 2014 Successful ARP Flush on interface [20] {EB1B6359-E90E-4E47-9F33-DDA5B5C50174}
Fri May 23 10:37:47 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri May 23 10:37:47 2014 K:\Windows\system32\route.exe ADD my-server-ip MASK 255.255.255.255 10.118.0.254
Fri May 23 10:37:47 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri May 23 10:37:47 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:37:47 2014 K:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 10.118.0.254
Fri May 23 10:37:47 2014 Route deletion via IPAPI succeeded [adaptive]
Fri May 23 10:37:47 2014 K:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.9.8.5
Fri May 23 10:37:47 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 23 10:37:47 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:37:47 2014 MANAGEMENT: >STATE:1400834267,ADD_ROUTES,,,
Fri May 23 10:37:47 2014 K:\Windows\system32\route.exe ADD 10.9.8.0 MASK 255.255.255.0 10.9.8.5
Fri May 23 10:37:47 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 23 10:37:47 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:37:47 2014 Initialization Sequence Completed
Fri May 23 10:37:47 2014 MANAGEMENT: >STATE:1400834267,CONNECTED,SUCCESS,10.9.8.6,my-server-ip
