Can't access all ports in LAN

airmax

My server conf:

port 1194
proto udp
dev tun
ca ./easy-rsa2/keys/ca.crt
cert ./easy-rsa2/keys/server.crt
key ./easy-rsa2/keys/server.key  # This file should be kept secret
dh ./easy-rsa2/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.178.0 255.255.255.0"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3

I can acess all my devices in my LAN. Also most services like VNC oder SSH are working fine. Yet I have a Jetty Webserver running on port 7750 which I can not reach via OpenVPN.

I thought all ports should be routed via vpn by default.

maikcat

openvpn operates at layer2-3 so it does NOT perform any type of filtering..

where is your Jetty Webserver runs?
how do you try to access it?

Michael.

airmax

Actually it is a Grizzly web server, started from within a java jar file.

I'm trying to access it via Browser and get a connection timeout.

maikcat

via which ip ? vpns or lan?

Michael

airmax

I'm using the LAN IP.

maikcat

can you ping/ssh/tracert to this ip from your client?
any firewall rules active on this server or on openvpn server itself?

Michael.

airmax

Thanks for the continued help. Ping / ssh / tracert all work all fine. I start to think that I should look elswhere for the issue.

The web server is running inside a VM on the OpenVPN Server.
On the OpenVPN Server I included this routing for the web server port:

iptables -t nat -A PREROUTING -p tcp -i em1 --dport 1337 -j DNAT --to-destination <ip of webserver vm>:1337

Traffic

airmax wroteI have a Jetty Webserver running on port 7750

airmax wroteI included this routing for the web server port:
Code:
iptables -t nat -A PREROUTING -p tcp -i em1 --dport 1337 -j DNAT --to-destination <ip of webserver vm>:1337

airmax wroteThe web server is running inside a VM

what VM software .. how is the VM networked to the host .. is the VM in the same LAN ???