I'm sorry, I thought the answers were not important anymore because that partially worked. But let's see all of this:
did you enabled ip forwarding on your server?
post the output of
iptables -L -v
iptables -L -v -t nat
on your openvpn server
also you are pushing 192.168.1.254 as your DNS server,is 254 runs dns services?
pi@raspberrypi ~ $ sudo iptables -L -v
Chain INPUT (policy ACCEPT 36985 packets, 21M bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 13688 packets, 9143K bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 30536 packets, 25M bytes)
pkts bytes target prot opt in out source destination
pi@raspberrypi ~ $ sudo iptables -L -v -t nat
Chain PREROUTING (policy ACCEPT 3203 packets, 367K bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 1701 packets, 253K bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1383 packets, 117K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 1383 packets, 117K bytes)
pkts bytes target prot opt in out source destination
1481 112K MASQUERADE all -- any eth0 10.8.0.0/24 anywhere
pi@raspberrypi ~ $ cat /etc/network/interfaces
auto lo
iface lo inet loopback
iface eth0 inet dhcp
pre-up /etc/firewall-openvpn-rules.sh
allow-hotplug wlan0
iface wlan0 inet manual
wpa-roam /etc/wpa_supplicant/wpa_supplicant.conf
iface default inet dhcp
pi@raspberrypi ~ $ sudo cat /etc/firewall-openvpn-rules.sh
#!/bin/sh
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
--> 192.168.1.254 is the provider router in my house which connect me to the internet. The service DHCP is on it. I suppose DNS too...
- When I have my smartphone connected to a WIFI:
I can access to my home servers via SSH
I can access to my web services (on my LAN)
I can access to the internet over my VPN
I can access to a samba server and transfer files even if the speed is really poor: 90Kbs. My samba server upload is about 1Mbs. Do you know why?
you connect via a wifi network OUTSIDE your openvpn servers lan,right?
how do you verify that you access internet over the tunnel and not via your local router?
the speed thing can be an mtu issue...
Of course, outside, wifi at work (maybe I should work instead...;P).
It is pretty easy to verify: Open a browser and write on google: who is my ip? --> answer: my home IP.
I haven't set any mtu on the eth0,
should I? which one?
It seems like the provider filters??
if connection is established then no,it can however limit udp rate...
Ok that's reassuring...because as far as I know, when VPN tunnel is established, any filter can be done by the provider except as you say on the kind of connection UDP vs TCP...
Should I try on TCP port?
Is there any impact for my server in terms of load? (Raspberry is not really strong...)
