Traffic not redirecting when connected

Afterglow

I've read the FAQ as well as searching for threads with the same issues but I'm still stuck, could someone please point out what I'm doing wrong?

I'm running OpenVPN server 2.3.2 on Amazon EC2 Ubuntu 14.04 VPS and OpenVPN GUI v5 client on Windows 8.1
I was able to connect without any error but nothing to get redirected to the VPN server.

Server config (the rest are default settings/semicolon):

port 4649
proto udp
dev tun

push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"

Upon adding the two push lines which was documented in the FAQ I wasn't able to connect to any internet address except the server itself.

Client config:

dev tun
proto udp
remote xx.xx.xx.xx 4649
remote-cert-tls server #ns-cert-type server is obsolete in OpenVPN 2.3? if I set to use ns-cert-type then client won't be able to connect at all

Much appreciated.

maikcat

please post FULL configs used.

also post the output of:

iptables -L -v
iptables -L -t nat -v

on your openvpn server,
also your server is a VZ container?

Michael.

Afterglow

maikcat wroteplease post FULL configs used.

also post the output of:

iptables -L -v
iptables -L -t nat -v

on your openvpn server,
also your server is a VZ container?

Michael.

The server is HVM based.

Server config: http://pastebin.com/pjm7U5qy
Client config: http://pastebin.com/atspu86U

iptables -L -v output:

ubuntu@ip-172-31-22-133:~$ sudo iptables -L -v
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination


Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination


Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

iptables -L -t nat -v :

ubuntu@ip-172-31-22-133:~$ sudo iptables -L -t nat -v
Chain PREROUTING (policy ACCEPT 3309 packets, 202K bytes)
 pkts bytes target     prot opt in     out     source               destination


Chain INPUT (policy ACCEPT 1159 packets, 66481 bytes)
 pkts bytes target     prot opt in     out     source               destination
 pkts bytes target     prot opt in     out     source               destination
 pkts bytes target     prot opt in     out     source               destination
    0     0 MASQUERADE  all  --  any    eth0    ip-10-8-0-0.us-west-1.compute.in
    0     0 MASQUERADE  all  --  any    eth0    ip-10-8-0-0.us-west-1.compute.in

And tracert if relevant: http://pastebin.com/npg0WCHe

Many thanks.

maikcat

server config

    port 4649
    proto udp
    dev tun
    ca ca.crt
    cert server.crt
    key server.key  # This file should be kept secret
    dh dh.pem
    server 10.8.0.0 255.255.255.0
    ifconfig-pool-persist ipp.txt
    push "redirect-gateway def1"
    push "dhcp-option DNS 10.8.0.1"
    push "dhcp-option WINS 10.8.0.1"
    keepalive 10 120
    cipher BF-CBC        # Blowfish (default)
    comp-lzo
    persist-key
    persist-tun
    status openvpn-status.log
    verb 3

maikcat

some questions:

is your vpn server runs any dns service? (f.e bind)
is ip forwarding enabled on openvpn server?
post the exact command used for NAT

Michael.

Afterglow

maikcat wrotesome questions:

is your vpn server runs any dns service? (f.e bind)
is ip forwarding enabled on openvpn server?
post the exact command used for NAT

Michael.

Thank you! I didn't know about ip forwarding until you mention it. Everything works fine now, the issue has been solved.

maikcat

im glad you solved it

Closing topic

Michael.