Hello friends, I bought a VPS (KVM) on Edis. But I'm unable to login clients for some reason :?: I can't even connect throught WiFi, I already did a lot of tests using 3G and I'm able to connect to my other VPS using both ways.
Here's my Server conf
port 443 #- port
proto tcp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo no
persist-key
persist-tun
status 1194.log
verb 3
log-append status.txt
Client
client
dev tun
proto tcp
remote 37.235.52.217 443 # - Your server IP and OpenVPN Port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
auth-user-pass
comp-lzo no
reneg-sec 0
verb 3
<ca>
blabla u don't need this :D
</ca>
<cert>
blabla u don't need this :D
</cert>
<key>
blabla u don't need this :D
</key>
Server log:
Fri Jul 18 14:22:43 2014 OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr 5 2012
Fri Jul 18 14:22:43 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jul 18 14:22:43 2014 PLUGIN_INIT: POST /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so '[/usr/share/openvpn/plugin/lib/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Fri Jul 18 14:22:43 2014 Diffie-Hellman initialized with 1024 bit key
Fri Jul 18 14:22:43 2014 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Fri Jul 18 14:22:43 2014 TLS-Auth MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Jul 18 14:22:43 2014 Socket Buffers: R=[87380->131072] S=[16384->131072]
Fri Jul 18 14:22:43 2014 ROUTE default_gateway=37.235.52.1
Fri Jul 18 14:22:43 2014 TUN/TAP device tun0 opened
Fri Jul 18 14:22:43 2014 TUN/TAP TX queue length set to 100
Fri Jul 18 14:22:43 2014 /sbin/ip link set dev tun0 up mtu 1500
Fri Jul 18 14:22:43 2014 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Fri Jul 18 14:22:43 2014 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Fri Jul 18 14:22:43 2014 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Fri Jul 18 14:22:43 2014 Listening for incoming TCP connection on [undef]:443
Fri Jul 18 14:22:43 2014 TCPv4_SERVER link local (bound): [undef]:443
Fri Jul 18 14:22:43 2014 TCPv4_SERVER link remote: [undef]
Fri Jul 18 14:22:43 2014 MULTI: multi_init called, r=256 v=256
Fri Jul 18 14:22:43 2014 IFCONFIG POOL: base=10.8.0.4 size=62
Fri Jul 18 14:22:43 2014 MULTI: TCP INIT maxclients=1024 maxevents=1028
Fri Jul 18 14:22:43 2014 Initialization Sequence Completed
Iptables
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2973:313564]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p udp -m udp --dport 1194 -j ACCEPT
-A INPUT -i tun+ -j ACCEPT
-A INPUT -i tun+ -j ACCEPT
-A INPUT -i tap+ -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-port-unreachable
COMMIT
# Completed on Fri Jul 18 14:06:59 2014
# Generated by iptables-save v1.4.7 on Fri Jul 18 14:06:59 2014
*nat
:PREROUTING ACCEPT [203:16136]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [3:216]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
-A POSTROUTING -j SNAT --to-source 37.235.52.217
COMMIT
What I got in OpenVPN Gui
Fri Jul 18 14:27:04 2014 TCP: connect to 37.235.52.217:443 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)
Even throught Openvpn Connect (in Android9 I got the same reply. What could be the trouble?
