Hi, I try to route all traffic over my OpenVPN server. However, on the server I get error Fri Jul 25 08:56:05 2014 us=257146 cleint1/IP:Port MULTI: bad source address from client [192.168.1.3], packet dropped My server config (deleted blocks that are completely commented out) is: [code] port 1194 ;proto tcp proto udp ;dev tap dev tun ca /path/to/ca cert /path/to/crt key /path/to/key # This file should be kept secret dh /path/to/dh server 10.196.77.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1" ;push "redirect-gateway def1 bypass-dhcp" client-to-client keepalive 60 180 tls-auth ta.key 0 # This file is secret ;cipher BF-CBC # Blowfish (default) cipher AES-256-CBC # AES ;cipher DES-EDE3-CBC # Triple-DES ;cipher AES-256-CFB8 comp-lzo user nobody group nogroup persist-key persist-tun status openvpn-status.log ;log openvpn.log log-append openvpn.log verb 4 [/code] Client I configured in network manager: [url=http://www.directupload.net/file/d/3694/6iygk7vl_png.htm][img]http://s1.directupload.net/images/140725/temp/6iygk7vl.png[/img][/url] I already read that about two causes. iptables -L -t nat -v gives: [code] Chain PREROUTING (policy ACCEPT 2714K packets, 423M bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 808K packets, 130M bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 2024K packets, 133M bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 2024K packets, 133M bytes) pkts bytes target prot opt in out source destination 4177 373K MASQUERADE all -- any eth0 10.196.77.0/24 anywhere [/code] And ipv4 forwarding is enabled: [code]cat /proc/sys/net/ipv4/ip_forward 1 [/code] Is there anything else I might have missed? Shall I post any additional information? Thanks

Routing issue in VPN

NoelzeN

Hi,
I try to route all traffic over my OpenVPN server. However, on the server I get error
Fri Jul 25 08:56:05 2014 us=257146 cleint1/IP:Port MULTI: bad source address from client [192.168.1.3], packet dropped
My server config (deleted blocks that are completely commented out) is:

port 1194

;proto tcp
proto udp

;dev tap
dev tun

ca /path/to/ca
cert /path/to/crt
key /path/to/key  # This file should be kept secret

dh /path/to/dh

server 10.196.77.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "redirect-gateway def1"
;push "redirect-gateway def1 bypass-dhcp"

client-to-client

keepalive 60 180

tls-auth ta.key 0 # This file is secret

;cipher BF-CBC        # Blowfish (default)
cipher AES-256-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES
;cipher AES-256-CFB8

comp-lzo

user nobody
group nogroup

persist-key
persist-tun

status openvpn-status.log

;log         openvpn.log
log-append  openvpn.log

verb 4

Client I configured in network manager:

I already read that about two causes.
iptables -L -t nat -v gives:

Chain PREROUTING (policy ACCEPT 2714K packets, 423M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 808K packets, 130M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 2024K packets, 133M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 2024K packets, 133M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 4177  373K MASQUERADE  all  --  any    eth0    10.196.77.0/24       anywhere

And ipv4 forwarding is enabled:

cat /proc/sys/net/ipv4/ip_forward
1

Is there anything else I might have missed? Shall I post any additional information?
Thanks