Possible to connect server to VPN service?

rragon

Hi!
I've finally got my VPN set up at home! But what I would like to do now is to connect my server to another VPN service. It would look something like this:

Client --> Own VPN server --> VPN service --> Internet

Now, I've got both the server and a client on the same machine running, but what I've got a problem with is getting out on the web. I'm currently connecting to my own VPN server but can't get out, however my IP on the server has changed so the client is indeed working.

Any thoughts?

Thanx in advance! // rragon

PS. I've been googling a whole lot so I help you guys can help, I'm desperate! .DS

maikcat

i believe if you NAT the traffic towards your second vpn it will work..

Michael.

rragon

maikcat wrotei believe if you NAT the traffic towards your second vpn it will work..

Michael.

Hi Michael and thanx for the quick response!
Tight now I'm NATing my server traffic to my external IP address, and I've tried to point it towards My second VPN. What address should I point it to? How do I go about finding the address that the second VPN resides on?

I'm running Ubuntu by the way! I tried Reading the client configuration file but couldn't find anything.

Thanx again! //rragon

maikcat

What address should I point it to?

You should point it to your second openvpn vpn ip, so the second server will think
that all traffic its coming by its client, which in your case is your openvpn server.

Michael.

rragon

maikcat wrote
What address should I point it to?
You should point it to your second openvpn vpn ip, so the second server will think
that all traffic its coming by its client, which in your case is your openvpn server.

Michael.

Thanks man! It's working now but another problem has emerged hehe, maybe you have any thoughts on it? When I point my openvpn server towards the client IP I can only connect to the server when I'm on the same LAN. If I for instance try to connect outside my home or from my smartphone I get the error: X509 - Ca certificate verification failed. I've checked and the CA certificates are all the same and it should work.

Thank again! // rragon

What I did (for anyone that gets this problem in the future) was:
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to CLIENT-IP