I'm running
DD-WRT v24-sp2 (07/24/13) std firmware on my router. I tried a few different guides, tried different fixes from others with similar sounding problem I seem to fix one thing and while braking something else....
I have a dsl router in bridge mode and my DD-WRT router doing the PPPoE login. Local IP: 10.0.0.1
I want to be able to route all the traffic from my phone to the VPN and threw my home router out to the internet, and I want to be able to turn on my firewall while doing it.
With the settings I have I can connect to the VPN and connect to things on my local network(slow speed) but only when I disable the router SPI Firewall. All other websites timeout.
Edit 1: I saw client log error
19:40:36.060 -- Error parsing IPv4 route: and changed Additional Config to
push "route 10.0.0.0 255.255.255.0" still websites timeout.
Router OpenVPN Server/Daemon Settings
OpenVPN Enable
StartType WAN Up
Config as Server
Server mode Router(TUN)
Network 10.8.0.0
NetMask 255.255.255.0
Port 1194
Tunnel Protocol UDP
Encryption Cipher AES-256-CBC
Hash Algorithm SHA256
Advanced Options Enable
TLS Cipher None
LZO Compression Yes
Redirect default Gateway Enable
Allow Client to Client Enable
Allow duplicate cn Disable
Tunnel MTU setting 1500
Tunnel UDP Fragment
Tunnel UDP MSS-Fix Disable
CCD-Dir DEFAULT file
Public Server Cert Pasted My Cert
CA Cert Pasted My Cert
Private Server Key Pasted My Key
DH PEM Pasted My DH
Additional Config:
push "route 10.0.0.1 255.255.255.0"
server 10.8.0.0 255.255.255.0
push "redirect-gateway"
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
verb 5
mute 2
management localhost 16
SaveFirewall Commands
iptables -I INPUT 1 -p tcp --dport 1194 -j ACCEPT
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 10.0.0.1/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
OpenVPN.ovpn
client
dev tun0
proto udp
remote some.ddns.net 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Client.crt
key Client.key
ns-cert-type server
cipher AES-256-CBC
auth SHA256
link-mtu 1570
comp-lzo
verb 5
Server Log
State Server: : Local Address: Remote Address: Client: CONNECTED: SUCCESS Local Address: 10.8.0.1 Remote Address:
Status
Log
Serverlog Clientlog 20140814 19:20:55 Current Parameter Settings:
20140814 19:20:55 config = '/tmp/openvpn/openvpn.conf'
20140814 19:20:55 NOTE: --mute triggered...
20140814 19:20:55 229 variation(s) on previous 2 message(s) suppressed by --mute
20140814 19:20:55 I OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 24 2013
20140814 19:20:55 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20140814 19:20:55 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20140814 19:20:55 Diffie-Hellman initialized with 2048 bit key
20140814 19:20:55 TLS-Auth MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
20140814 19:20:55 Socket Buffers: R=[163840->131072] S=[163840->131072]
20140814 19:20:55 I TUN/TAP device tun0 opened
20140814 19:20:55 TUN/TAP TX queue length set to 100
20140814 19:20:55 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20140814 19:20:55 I /sbin/ifconfig tun0 10.8.0.1 netmask 255.255.255.0 mtu 1500 broadcast 10.8.0.255
20140814 19:20:57 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
20140814 19:20:57 I UDPv4 link local (bound): [undef]
20140814 19:20:57 I UDPv4 link remote: [undef]
20140814 19:20:57 MULTI: multi_init called r=256 v=256
20140814 19:20:57 IFCONFIG POOL: base=10.8.0.2 size=252 ipv6=0
20140814 19:20:57 IFCONFIG POOL LIST
20140814 19:20:57 I Initialization Sequence Completed
20140814 19:23:03 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:23:03 D MANAGEMENT: CMD 'state'
20140814 19:23:03 MANAGEMENT: Client disconnected
20140814 19:23:03 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:23:03 D MANAGEMENT: CMD 'state'
20140814 19:23:03 MANAGEMENT: Client disconnected
20140814 19:23:03 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:23:03 D MANAGEMENT: CMD 'state'
20140814 19:23:03 MANAGEMENT: Client disconnected
20140814 19:23:03 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:23:03 D MANAGEMENT: CMD 'log 500'
20140814 19:23:03 MANAGEMENT: Client disconnected
20140814 19:40:29 MULTI: multi_create_instance called
20140814 19:40:29 172.56.16.48:40638 Re-using SSL/TLS context
20140814 19:40:29 172.56.16.48:40638 LZO compression initialized
20140814 19:40:29 172.56.16.48:40638 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
20140814 19:40:29 172.56.16.48:40638 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
20140814 19:40:29 172.56.16.48:40638 Local Options String: 'V4 dev-type tun link-mtu 1570 tun-mtu 1500 proto UDPv4 comp-lzo cipher AES-256-CBC auth SHA256 keysize 256 key-method 2 tls-server'
20140814 19:40:29 172.56.16.48:40638 Expected Remote Options String: 'V4 dev-type tun link-mtu 1570 tun-mtu 1500 proto UDPv4 comp-lzo cipher AES-256-CBC auth SHA256 keysize 256 key-method 2 tls-client'
20140814 19:40:29 172.56.16.48:40638 Local Options hash (VER=V4): '79a26cd9'
20140814 19:40:29 172.56.16.48:40638 Expected Remote Options hash (VER=V4): 'fc8ba345'
20140814 19:40:29 172.56.16.48:40638 TLS: Initial packet from [AF_INET]172.56.16.48:40638 sid=0dd2e9b2 03b6dfda
20140814 19:40:35 172.56.16.48:40638 VERIFY OK: depth=1 C=US ST=CA L=SomeCity O=Someinc OU=SomeHouse CN=SomeNameV emailAddress=SomeeMailV@gmail.com
20140814 19:40:35 172.56.16.48:40638 NOTE: --mute triggered...
20140814 19:40:36 172.56.16.48:40638 6 variation(s) on previous 2 message(s) suppressed by --mute
20140814 19:40:36 I 172.56.16.48:40638 [SomeNameV] Peer Connection Initiated with [AF_INET]172.56.16.48:40638
20140814 19:40:36 I SomeNameV/172.56.16.48:40638 MULTI_sva: pool returned IPv4=10.8.0.2 IPv6=(Not enabled)
20140814 19:40:36 SomeNameV/172.56.16.48:40638 MULTI: Learn: 10.8.0.2 -> SomeNameV/172.56.16.48:40638
20140814 19:40:36 SomeNameV/172.56.16.48:40638 MULTI: primary virtual IP for SomeNameV/172.56.16.48:40638: 10.8.0.2
20140814 19:40:37 SomeNameV/172.56.16.48:40638 PUSH: Received control message: 'PUSH_REQUEST'
20140814 19:40:37 I SomeNameV/172.56.16.48:40638 send_push_reply(): safe_cap=940
20140814 19:40:37 SomeNameV/172.56.16.48:40638 SENT CONTROL [SomeNameV]: 'PUSH_REPLY redirect-gateway def1 route 10.0.0.1 255.255.255.0 redirect-gateway route-gateway 10.8.0.1 topology subnet ping 10 ping-restart 120 ifconfig 10.8.0.2 255.255.255.0' (status=1)
20140814 19:42:25 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:42:25 D MANAGEMENT: CMD 'state'
20140814 19:42:26 MANAGEMENT: Client disconnected
20140814 19:42:26 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:42:26 D MANAGEMENT: CMD 'state'
20140814 19:42:26 MANAGEMENT: Client disconnected
20140814 19:42:26 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:42:26 D MANAGEMENT: CMD 'state'
20140814 19:42:26 MANAGEMENT: Client disconnected
20140814 19:42:26 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140814 19:42:26 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
Client Log
OpenVPN Log File
19:40:27.734 OpenVPN Start
19:40:27.734 -- EVENT: CORE_THREAD_ACTIVE
19:40:27.793 -- UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
14 [link-mtu] [1570]
16 [verb] [5]
19:40:27.794 -- EVENT: RESOLVE
19:40:28.462 LZO-ASYM init swap=0 asym=0
19:40:28.463 -- Contacting 108.221.249.83:1194 via UDP
19:40:28.463 -- EVENT: WAIT
19:40:28.471 -- Connecting to some.ddns.net:1194 (108.221.xxx.xx) via UDPv4
19:40:28.722 -- EVENT: CONNECTING
19:40:28.729 -- Tunnel Options:V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-Izo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,t1s-client
19:40:28.730 -- Peer Info: IV_GUI_VER=net.openvpn.connect.android 1.1.14-56 IV_VER=3.0 IV_PLAT=android IV_NCP=1 IV_LZ0=1
19:40:32.119 -- VERIFY OK: depth=1 cert. version : 3 serial number : 96:7C:85:6A:xx:xx:xx:xx issuer name : C=US, ST=CA, L=SomeCity, O=Someinc, OU=SomeHouse, CN=SomeNameV, emailAddress=SomeeMailV@gmail.com subject name : C=US, ST=CA, L=SomeCity, O=Someinc, OU=SomeHouse, CN=SomeNameV, emailAddress=SomeeMailV@gmail.com issued on : 2014-08-10
19:09:56 expires on : 2024-08-07
19:09:56 signed using : RSA with SHA1 RSA key size : 2048 bits basic constraints : CA=true
19:40:32.120 -- VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=CA, L=SomeCity, O=Someinc, OU=SomeHouse, CN=SomeNameV,
emailAddress=SomeeMailV@gmail.com
subject name : C=US, ST=CA, O=Someinc, OU=SomeHouse, CN=Server,
emailAddress=SomeeMailV@gmail.com
issued on : 2014-08-10 20:17:25
expires on : 2024-08-07 20:17:25
signed using : RSA with MD5
RSA key size : 2048 bits
basic constraints : CA=false
cert. type : SSL Server
19:40:34.964 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
19:40:34.965 -- Session is ACTIVE
19:40:35.965 -- EVENT: GET_CONFIG
19:40:35.973 -- Sending PUSH_REQUEST to server...
19:40:36.044 -- OPTIONS:
0 [redirect-gateway] [deft]
1 [route] [10.0.0.1] [255.255.255.0]
2 [redirect-gateway]
3 [route-gateway] [10.8.0.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [10.8.0.2] [255.255.255.0]
6 [ping-restart] [120]
7 [ifconfig] [10.8.0.2] [255.255.255.0]
19:40:36.046 LZO-ASYM init swap=0 asym=0
19:40:36.047 -- EVENT: ASSIGN_IP
19:40:36.060 -- Error parsing IPv4 route: [route] [10.0.0.1] [255.255.255.0] : tun_prop_error: route is not canonical
19:40:36.063 Google DNS fallback enabled
19:40:36.128 TunPersist: saving tun context:
Session Name: some.ddns.net
Remote Address: 108.221.249.83
Tunnel Addresses: 10.8.0.2/24 -> 10.8.0.1
Reroute Gateway: IPv4=1 IPv6=0 flags=[ ENABLE REROUTE_GW DEF1 IPv4 ]
Block IPv6: no
Add Routes:
Exclude Routes:
DNS Servers:
8.8.8.8
8.8.4.4
Search Domains:
19:40:36.129 -- Connected via tun
19:40:36.130 -- EVENT: CONNECTED info='@some.ddns.net:1194 (108.221.249.83) via / UDPv4 on tun/10.8.0.2/ trans=TO_CONNECTED
