Routing client traffic through bridged VPN

GC23

I have recently set up a bridged OpenVPN server on Debian wheezy. I am able to connect to the server (with an Ubuntu client) successfully and access resources/other servers on the same LAN as the OpenVPN server. However, I would like to route internet browsing traffic through the VPN as well. After adding the "redirect-gateway" and "dhcp-option DNS 10.4.4.1" (10.4.4.1 is the gateway for the 10.4.4.0 subnet that my OpenVPN server resides on. VPN Clients also receive a local IP address within this subnet through the bridging on the server) to my server config file, I am still able to access resources on the local LAN but I can access servers over the internet by there IP address only (I can ping 8.8.8.8 or 74.125.225.18, but not www.google.com). Using traceroute on the client machine reveals that the IP traffic (when directed to an IP address, such as 8.8.8.8) is correctly traveling through the 10.4.4.1 gateway of the server's LAN. I believe the problem has to do with DNS, as pinging or accessing websites using their IP addresses seems to work correctly, but I would like assistance in figuring out a solution.

My network setup:
subnet: 10.4.4.0
subnet mask: 255.255.255.0
gateway: 10.4.4.1 (also provides dhcp and dns services)
OpenVPN server: 10.4.4.10
OpenVPN clients: 10.4.4.201 - 10.4.4.240

VPN Clients are able to communicate with any other devices connected to the network (and vice-versa).

My server config:

port 1194
proto udp
dev tap0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server1.crt
key /etc/openvpn/server1.key
dh /etc/openvpn/dh4096.pem
ifconfig-pool-persist ipp.txt
server-bridge 10.4.4.1 255.255.255.0 10.4.4.201 10.4.4.240
push "redirect-gateway"
push "dhcp-option DNS 10.4.4.1"
client-to-client
keepalive 10 120
cipher AES-256-CBC
comp-lzo
max-clients 5
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 4

I have tried changing the:
push "redirect-gateway"
line to:
push "redirect-gateway def1"
and
push "redirect-gateway def1 bypass-dhcp"
which both yielded the same results.

I have also tried changing the:
push "dhcp-option DNS 10.4.4.1"
line to:
push "dhcp-option DNS 8.8.8.8"
which yielded the same results as well.

My client config:

client
dev tap
proto udp
remote <Server_Public_IP> 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1.key
ns-cert-type server
comp-lzo
verb 4
cipher AES-256-CBC

Thanks in advance for any help.

GC23

I forgot to add, my iptables rules on the server are as follows:

iptables -A INPUT -i tap0 -j ACCEPT
iptables -A INPUT -i br0 -j ACCEPT
iptables -A FORWARD -i br0 -j ACCEPT

GC23

debbie10t wroteIs your machine 10.4.4.1 a DNS Server or DNS proxy ?

Yes, the 10.4.4.1 machine is a DNS proxy. In addition to this, I have tried changing the DNS server by changing the: push "dhcp-option DNS 10.4.4.1" line to: push "dhcp-option DNS 8.8.8.8". The result was the same as using 10.4.4.1.

GC23

debbie10t wroteSee this:
https://forums.openvpn.net/topic16047.html

That's what it was, DNS and traffic forwarding are working properly now. Thanks for your help, I greatly appreciate it.