My openvpn setup
client - ubuntu
remote my.domain.com
dev tun
ifconfig 10.10.0.2 10.10.0.1
secret /etc/openvpn/static.key
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
user nobody
group nobody
daemon
Server - openbsd
dev tun
ifconfig 10.10.0.1 10.10.0.2
secret static.key
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
user nobody
group nobody
daemon
udp port 1194 on firewall is open, tun interface on firewall is set to skip all traffic.
ping 10.10.0.1 from client
PING 10.10.0.1 (10.10.0.1) 56(84) bytes of data.
From 10.10.0.1 icmp_seq=1 Destination Port Unreachable
From 10.10.0.1 icmp_seq=2 Destination Port Unreachable
tcpdump output from server shows
tcpdump: listening on tun0, link-type LOOP
03:06:41.022141 10.10.0.2 > 10.10.0.1: icmp: echo request (DF)
03:06:41.022201 10.10.0.1 > 10.10.0.2: icmp: 10.10.0.1 protocol 1 port 21044 unreachable
03:06:42.028768 10.10.0.2 > 10.10.0.1: icmp: echo request (DF)
03:06:42.028832 10.10.0.1 > 10.10.0.2: icmp: 10.10.0.1 protocol 1 port 59948 unreachable
ping 10.10.0.2 from server
PING 10.10.0.2 (10.10.0.2): 56 data bytes
ping: sendto: No route to host
ping: wrote 10.10.0.2 64 chars, ret=-1
ping: sendto: No route to host
tcpdump form client show no outputs
client's routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 100.97.*.* 0.0.0.0 UG 0 0 0 wlan0
10.10.0.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
100.97.*.0 0.0.0.0 255.255.240.0 U 9 0 0 wlan0
server's routing table
Internet:
Destination Gateway Flags Refs Use Mtu Prio Iface
default 5.76.*.1 UGS 7 78028 - 8 vr0
10.10.0.1 127.0.0.1 UHl 0 26 - 1 lo0
10.10.0.2 10.10.0.1 UH 0 15 - 4 tun0
5.76.*/20 link#1 UC 1 0 - 4 vr0
5.76.*.1 88:e0:f3:b8:19:9c UHLc 2 3 - 4 vr0
5.76.*.109 00:0d:b9:26:98:e8 UHLl 0 2 - 1 lo0
log from server
$ tail -f /var/log/messages
Aug 4 03:19:04 blackbox openvpn[23348]: OpenVPN 2.3.2 i386-unknown-openbsd5.6 [SSL (OpenSSL)] [LZO] [eurephia] [MH] [IPv6] built on Aug 1 2014
Aug 4 03:19:04 blackbox openvpn[23348]: WARNING: file 'static.key' is group or others accessible
Aug 4 03:19:04 blackbox openvpn[23348]: WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Aug 4 03:19:04 blackbox openvpn[23348]: TUN/TAP device /dev/tun0 opened
Aug 4 03:19:04 blackbox openvpn[23348]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Aug 4 03:19:04 blackbox openvpn[23348]: /sbin/ifconfig tun0 10.10.0.1 10.10.0.2 mtu 1400 netmask 255.255.255.255 up -link0
Aug 4 03:19:04 blackbox openvpn[13662]: GID set to nobody
Aug 4 03:19:04 blackbox openvpn[13662]: UID set to nobody
Aug 4 03:19:04 blackbox openvpn[13662]: UDPv4 link local (bound): [undef]
Aug 4 03:19:04 blackbox openvpn[13662]: UDPv4 link remote: [undef]
Aug 4 03:19:10 blackbox openvpn[13662]: Peer Connection Initiated with [AF_INET]145.255.*.191:52565
Aug 4 03:19:10 blackbox openvpn[13662]: Initialization Sequence Completed
Please help me!
