connection established, can't ping server or access internet

Simon818

I've configured OpenVPN on two servers now. Both of them are virtual servers from RamNode.com running Ubuntu. In the case of the one that works, 12.04, and in the case of the one we're going to talk about here, 14.04.
I was able to successfully configure my Seattle node and can connect to it using Windows and iOS clients. However, for some reason my New York server is just stubbornly refusing to work correctly. I have followed many a guide on getting iptables set up properly as well as the actual server configuration. The resulting server config is below, thrown together from a guide I adapted: This same config works in Seattle. Suggestions are appreciated. What I know right now is that I am assigned an IP address and ddefault gateway, and thanks to Google DNS I am able to get as far as doing a DNS lookup, but I cannot access any resources including my own server's IP address, assuming that is the same as the default gateway. So pinging google will end up showing me an IP address, but all requests will time out.

#111.111.111.111 is not my real IP address.
local 111.111.111.111
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/fakeservername.crt
key /etc/openvpn/easy-rsa/keys/fakeservername.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 111.111.111.111 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 3

maikcat

can you post:

server logs,
output of iptables -t nat -L
output of ifconfig

Michael.

teckins

Assuming you have iptables and linux running run the following rules:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -o venet0 -j SNAT --to-source 123.123.123.123
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 123.123.123.123
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -j SNAT --to-source 123.123.123.123

Where 123.123.123.123 = server ip.

Source: http://safesrv.net/install-openvpn-on-centos/

Then run service iptables save and then service iptables restart