hmmm ... pastebin.com
without adverts .. that's new.
Server config:
;local a.b.c.d
;proto tcp
proto udp
dev tap
;dev tun
;dev-node MyTap
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh dh2048.pem
server 192.168.4.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
;duplicate-cn
keepalive 1800 4000
tls-auth /etc/openvpn/ta.key 0 # This file is secret
;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 2
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
;log-append openvpn.log
verb 5
mute 20
Client config:
client
dev tap
;dev tun
;dev-node MyTap
;proto tcp
proto udp
remote ip 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nogroup
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca C:\\Users\\user\\.ssh\\ca.crt
cert C:\\Users\\user\\.ssh\\user.crt
key C:\\Users\\user\\.ssh\\user.key
ns-cert-type server
tls-auth C:\\Users\\Slapy\\.ssh\\ta.key 1
cipher DES-EDE3-CBC
comp-lzo
verb 3
;mute 20
iptables nightmare:
# Generated by iptables-save v1.4.21 on Wed Jun 17 15:39:11 2015
*raw
:PREROUTING ACCEPT [1165561:60114170]
:OUTPUT ACCEPT [1281799:2983272487]
COMMIT
# Completed on Wed Jun 17 15:39:11 2015
# Generated by iptables-save v1.4.21 on Wed Jun 17 15:39:11 2015
*nat
:PREROUTING ACCEPT [4:234]
:INPUT ACCEPT [4:234]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 192.168.4.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Wed Jun 17 15:39:11 2015
# Generated by iptables-save v1.4.21 on Wed Jun 17 15:39:11 2015
*mangle
:PREROUTING ACCEPT [1165561:60114170]
:INPUT ACCEPT [1163314:59960586]
:FORWARD ACCEPT [1662:100281]
:OUTPUT ACCEPT [1281799:2983272487]
:POSTROUTING ACCEPT [1281799:2983272487]
COMMIT
# Completed on Wed Jun 17 15:39:11 2015
# Generated by iptables-save v1.4.21 on Wed Jun 17 15:39:11 2015
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -d 127.0.0.0/8 ! -i lo -j REJECT --reject-with icmp-port-unreachable
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p udp -m udp --dport 9987 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 10011 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 30033 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25565 -j ACCEPT
-A INPUT -p udp -m udp --dport 25565 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 6881 -j ACCEPT
-A INPUT -p udp -m udp --dport 6881 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 33101:33199 -j ACCEPT
-A INPUT -p udp -m multiport --dports 33101:33199 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1194 -j ACCEPT
-A INPUT -p udp -m udp --dport 1194 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 9494 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -j ACCEPT
COMMIT
# Completed on Wed Jun 17 15:39:11 2015
Routes of
presumably the client:
without OpenVPN route print
===========================================================================
Interface List
106...00 ff db d8 46 62 ......TAP-Windows Adapter V9 #2
43...00 ff 72 7a 74 bd ......TeamViewer VPN Adapter
33...00 15 5d f2 70 95 ......Hyper-V Virtual Ethernet Adapter #6
31...0c d2 92 04 11 bd ......Hyper-V Virtual Ethernet Adapter #5
29...8c 89 a5 03 b0 dd ......Hyper-V Virtual Ethernet Adapter #4
27...00 ff d8 ca 61 2d ......Hyper-V Virtual Ethernet Adapter #3
25...00 ff 1f 8a a1 63 ......Hyper-V Virtual Ethernet Adapter #2
8...04 11 c2 00 00 00 ......Bluetooth Device (Personal Area Network)
4...0c d2 92 04 11 be ......Microsoft Wi-Fi Direct Virtual Adapter
3...0c d2 92 04 11 bd ......Intel(R) Centrino(R) Wireless-N 135
1...........................Software Loopback Interface 1
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
22...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
105...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.10 10
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 169.254.123.19 286
169.254.0.0 255.255.0.0 On-link 169.254.80.80 261
169.254.80.80 255.255.255.255 On-link 169.254.80.80 261
169.254.123.19 255.255.255.255 On-link 169.254.123.19 286
169.254.255.255 255.255.255.255 On-link 169.254.123.19 286
169.254.255.255 255.255.255.255 On-link 169.254.80.80 261
192.168.0.0 255.255.255.0 On-link 192.168.0.10 266
192.168.0.10 255.255.255.255 On-link 192.168.0.10 266
192.168.0.255 255.255.255.255 On-link 192.168.0.10 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.0.10 266
224.0.0.0 240.0.0.0 On-link 169.254.123.19 286
224.0.0.0 240.0.0.0 On-link 169.254.80.80 261
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.0.10 266
255.255.255.255 255.255.255.255 On-link 169.254.123.19 286
255.255.255.255 255.255.255.255 On-link 169.254.80.80 261
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
29 266 fe80::/64 On-link
27 286 fe80::/64 On-link
33 261 fe80::/64 On-link
29 266 fe80::25ee:89d0:6d7e:d32b/128
On-link
33 261 fe80::619b:b1d0:8a55:94d1/128
On-link
27 286 fe80::9cf9:ac0b:ef85:4fad/128
On-link
1 306 ff00::/8 On-link
29 266 ff00::/8 On-link
27 286 ff00::/8 On-link
33 261 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
with OpenVPN active route print
===========================================================================
Interface List
106...00 ff db d8 46 62 ......TAP-Windows Adapter V9 #2
43...00 ff 72 7a 74 bd ......TeamViewer VPN Adapter
33...00 15 5d f2 70 95 ......Hyper-V Virtual Ethernet Adapter #6
31...0c d2 92 04 11 bd ......Hyper-V Virtual Ethernet Adapter #5
29...8c 89 a5 03 b0 dd ......Hyper-V Virtual Ethernet Adapter #4
27...00 ff d8 ca 61 2d ......Hyper-V Virtual Ethernet Adapter #3
25...00 ff 1f 8a a1 63 ......Hyper-V Virtual Ethernet Adapter #2
8...04 11 c2 00 00 00 ......Bluetooth Device (Personal Area Network)
4...0c d2 92 04 11 be ......Microsoft Wi-Fi Direct Virtual Adapter
3...0c d2 92 04 11 bd ......Intel(R) Centrino(R) Wireless-N 135
1...........................Software Loopback Interface 1
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
22...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
105...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
112...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #6
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.10 10
0.0.0.0 128.0.0.0 192.168.4.1 192.168.4.2 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
128.0.0.0 128.0.0.0 192.168.4.1 192.168.4.2 20
149.98.65.38 255.255.255.255 192.168.0.1 192.168.0.10 10
169.254.0.0 255.255.0.0 On-link 169.254.123.19 286
169.254.0.0 255.255.0.0 On-link 169.254.80.80 261
169.254.80.80 255.255.255.255 On-link 169.254.80.80 261
169.254.123.19 255.255.255.255 On-link 169.254.123.19 286
169.254.255.255 255.255.255.255 On-link 169.254.123.19 286
169.254.255.255 255.255.255.255 On-link 169.254.80.80 261
192.168.0.0 255.255.255.0 On-link 192.168.0.10 266
192.168.0.1 255.255.255.255 192.168.0.1 192.168.0.10 10
192.168.0.10 255.255.255.255 On-link 192.168.0.10 266
192.168.0.255 255.255.255.255 On-link 192.168.0.10 266
192.168.4.0 255.255.255.0 On-link 192.168.4.2 276
192.168.4.2 255.255.255.255 On-link 192.168.4.2 276
192.168.4.255 255.255.255.255 On-link 192.168.4.2 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.0.10 266
224.0.0.0 240.0.0.0 On-link 169.254.123.19 286
224.0.0.0 240.0.0.0 On-link 169.254.80.80 261
224.0.0.0 240.0.0.0 On-link 192.168.4.2 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.0.10 266
255.255.255.255 255.255.255.255 On-link 169.254.123.19 286
255.255.255.255 255.255.255.255 On-link 169.254.80.80 261
255.255.255.255 255.255.255.255 On-link 192.168.4.2 276
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
29 266 fe80::/64 On-link
27 286 fe80::/64 On-link
33 261 fe80::/64 On-link
106 276 fe80::/64 On-link
29 266 fe80::25ee:89d0:6d7e:d32b/128
On-link
106 276 fe80::3c08:784a:af61:c5f8/128
On-link
33 261 fe80::619b:b1d0:8a55:94d1/128
On-link
27 286 fe80::9cf9:ac0b:ef85:4fad/128
On-link
1 306 ff00::/8 On-link
29 266 ff00::/8 On-link
27 286 ff00::/8 On-link
33 261 ff00::/8 On-link
106 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
Reviewing ...
