Good evening, I need a little help here. Been at this for the past 2 days and tried just about anything i could... but still cant figure this out for the life of me. Basically the issue that i'am able to connect to my server (ubuntu 14.04) using my client (Win 7) and get ip adress 10.8.0.8. But unfortunately i'm then sandboxed within my server with no access to either internet or LAN (cant ping the server either). Any help / input would be greatly appreciated as i'm still a novice to openvpn i have included below my server.conf, client.conf and iptables. Thank you all in advance for your time and much valued input. [u]Server.conf[/u] dev tun proto udp port 1194 ca /etc/openvpn/ca.crt cert /etc/openvpn/server.crt key /etc/openvpn/server.key dh /etc/openvpn/dh1024.pem user nobody group nogroup server 10.8.0.0 255.255.255.0 persist-key persist-tun client-to-client push "route 192.168.0.0 255.255.255.0" push "redirect-gateway def1" push "dhcp-option DNS 8.8.8.8" log-append /var/log/openvpn plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so openvpn client-cert-not-required username-as-common-name management localhost 7505 [u]IP tables[/u] Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:openvpn Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT all -- 192.168.0.0/24 anywhere ctstate NEW ACCEPT all -- 10.8.0.0/24 anywhere ctstate NEW ACCEPT all -- 10.8.0.0/24 192.168.0.0/24 ctstate NEW Chain OUTPUT (policy ACCEPT) target prot opt source destination [u]Client.conf[/u] client dev tun proto udp remote 196.xxx.xxx.xxx 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt auth-user-pass comp-lzo verb 3

is ipforwarding enabled on server? post the output of iptables -t nat -L -v on your openvpn server. Michael

Duplicate post: [url]https://forums.openvpn.net/topic18033.html[/url]

First let me start by thanking both of you for getting back at me so quick. I really appreciate the time and input. @Traffic Sorry about that... I just guess it was double posted by accident when i tried to clean up the code, and post layout.... @maikcat Ip Forwarding is enabled on the server, and here are my ip tables. [code] Kernel IP routing table (server) Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0 10.8.0.2 * 255.255.255.255 UH 0 0 0 tun0 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 [/code] I have done some more testing today, i'am still unable to ping the server @ 10.8.0.1 or the gateway at 10.8.0.2, furthermore, my firewall (win 7 client) was disabled during this test to make sure it wasnt causing any issues. Any idea what the issue could be?? all input / ideas on the situation would be greatly appreciated.

this is your routing table not the output of the command i requested, also are you starting openvpn on your 7 using admin rights? Michael.

Good morining Michael. the following is the output of the command you requested: [code] Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 9 packets, 628 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 9 packets, 628 bytes) pkts bytes target prot opt in out source destination 0 0 MASQUERADE all -- any eth1 192.168.0.0/24 anywhere 0 0 MASQUERADE all -- any eth1 10.8.0.0/24 anywhere 0 0 MASQUERADE all -- any eth anywhere anywhere [/code] Mo.

please clarify your network topology, f.e you are pushing route about 192.168.0.0/24 while your lan is 192.168.1.0/24 also you are NATing traffic from 192.168.0.0/24 (?). Michael.

And yes i do run my client with admin privileges under windows.

Makes sense, thank you for clearing that up Michael. I just modified LAN params, and retested unfortunately still unable to connect. Please bare with me as i said its my first time with open VPN. Could the problem be from the interfaces used? I had a look at the BridgingAndRouting guide on OpenVPN commmunity. it seems to be correct. Here is a new list from my iptables and routing: [code] Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:openvpn Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT all -- 192.168.1.0/24 anywhere ctstate NEW ACCEPT all -- 10.8.0.0/24 anywhere ctstate NEW ACCEPT all -- 10.8.0.0/24 192.168.1.0/24 ctstate NEW Chain OUTPUT (policy ACCEPT) target prot opt source destination [/code] [code] Chain PREROUTING (policy ACCEPT 137 packets, 9310 bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 35 packets, 4020 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 22 packets, 1510 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 22 packets, 1510 bytes) pkts bytes target prot opt in out source destination 0 0 MASQUERADE all -- any eth1 192.168.1.0/24 anywhere 0 0 MASQUERADE all -- any eth1 10.8.0.0/24 anywhere 0 0 MASQUERADE all -- any eth anywhere anywhere [/code] Much appreciated. Mo.

Upon further modifications (changing interface to eth0, as eth1 was not present in my ifconfig). It seems that i'm starting to get some packets going through which wasnt the case using non-existant eth1. :oops: ... Although im making a bit of progress, unfortunately the server still cant connect to the internet. [b]Output from #iptables -t nat -L -v[/b] [code] Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 4 274 MASQUERADE all -- any eth0 192.168.1.0/24 anywhere 0 0 MASQUERADE all -- any eth0 10.8.0.0/24 anywhere 0 0 MASQUERADE all -- any eth anywhere anywhere [/code] [b]Output from #iptables-save [/b] [code] # Generated by iptables-save v1.4.21 on Fri Jan 30 12:34:00 2015 *nat :PREROUTING ACCEPT [1:60] :INPUT ACCEPT [1:60] :OUTPUT ACCEPT [31:2138] :POSTROUTING ACCEPT [31:2138] -A POSTROUTING -s 192.168.1.0/24 -o eth0 -j MASQUERADE -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE -A POSTROUTING -o eth -j MASQUERADE COMMIT # Completed on Fri Jan 30 12:34:00 2015 # Generated by iptables-save v1.4.21 on Fri Jan 30 12:34:00 2015 *filter :INPUT ACCEPT [298:15907] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [190:11601] -A INPUT -p udp -m udp --dport 1194 -j ACCEPT -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.1.0/24 -i eth0 -o eth0 -m conntrack --ctstate NEW -j ACCEPT -A FORWARD -s 10.8.0.0/24 -i tun0 -o eth0 -m conntrack --ctstate NEW -j ACCEPT -A FORWARD -s 10.8.0.0/24 -d 192.168.1.0/24 -i tun0 -o eth0 -m conntrack --ctstate NEW -j ACCEPT COMMIT # Completed on Fri Jan 30 12:34:00 2015 [/code] [b]Output from #ifconfig[/b] [code] eth0 Link encap:Ethernet HWaddr 00:1e:33:7b:e9:1b inet addr:192.168.1.4 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::21e:33ff:fe7b:e91b/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10585 errors:0 dropped:0 overruns:0 frame:0 TX packets:6005 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:892118 (892.1 KB) TX bytes:557751 (557.7 KB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:32 errors:0 dropped:0 overruns:0 frame:0 TX packets:32 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2480 (2.4 KB) TX bytes:2480 (2.4 KB) tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) [/code] Any ideas??

lets start all over... flush *ALL* firewall & NAT rules and add ONLY this [code]0 0 MASQUERADE all -- any eth0 10.8.0.0/24 anywhere[/code] leave your firewall rules to allow for testing,you review them later. Michael.

[Solved]OpenVPN client connects to server but no internet

Traffic

rahalm45 wrotePS: @Traffic Thank you as well for your input.

You can reach me too: flingpooh at gmail dot cooom

maikcat

rahalm45 wrote@Michael Success!!! You are like the VPN whisperer! 😃 Thnx alot for being so patient throughout this whole process. I can honestly say i've learned quite a bit from the few exchanges we've had.

I owe you a solid one, listen i've got an internet marketing company doing lots of stuff with SEO, webdesign, lead generation, email marketing... If you ever need anything along those lines don't hesitate to PM me, it would be my pleasure to return the favor in anyway i can.

Mo.

PS: @Traffic Thank you as well for your input.

Good morning from cloudy Athens,

Glad i have helped you and thank you for your offer 🙂

Marked as solved,

closing topic

regards,

Michael.

« Previous Page