1 Client Works , all other clients have not internet

mole

I have a couple of computers that I am trying to get working with OpenVPN.
Each of the Computers are on my inside network and I would like all traffic to go through
the VPN that my Server is connected to.

Client -> Server -> VPN ->Internet

Currently I was able to get 1 computer to work fine where it has full access to the internet.
All the other machines I have tried are able to connect to the Server, but they do not have any network.
The working machine is running Windows 10, while the other machines are running Windows 8.1
I am using the same config for all the machines

I have a Windows 2003 R2 server
My server has a single Network connection with a VPN connection
My sever IP on the network is 172.168.10.203
I use ICS to share Main connection with my "MyTap" connection.

I am using 192.168.137.1 for my OpenVpn connections.

Here is the Server Config

port 1194

proto udp

dev tun

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key"

dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"

server 192.168.137.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 208.67.222.222"

duplicate-cn

keepalive 10 120

comp-lzo

persist-key
persist-tun

status openvpn-status.log

verb 3

Client Config

client

dev tun

dev-node MyTap

proto udp

remote 172.168.10.203 1194

resolv-retry infinite

nobind

persist-key
persist-tun

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\justin.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\justin.key"

comp-lzo

verb 3

Here is the Log from the working machine

Fri Oct 16 20:40:19 2015 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010
Fri Oct 16 20:40:19 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Oct 16 20:40:19 2015 LZO compression initialized
Fri Oct 16 20:40:19 2015 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Oct 16 20:40:19 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Oct 16 20:40:19 2015 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Oct 16 20:40:19 2015 Local Options hash (VER=V4): '41690919'
Fri Oct 16 20:40:19 2015 Expected Remote Options hash (VER=V4): '530fdded'
Fri Oct 16 20:40:19 2015 UDPv4 link local: [undef]
Fri Oct 16 20:40:19 2015 UDPv4 link remote: 172.168.10.203:1194
Fri Oct 16 20:40:19 2015 TLS: Initial packet from 172.168.10.203:1194, sid=f19a97d7 22a73dfe
Fri Oct 16 20:40:20 2015 VERIFY OK: depth=1, /C=US/ST=LEE/L=FortMyers/O=OpenVPN/OU=IT/CN=Plex/emailAddress=test@test.com
Fri Oct 16 20:40:20 2015 VERIFY OK: nsCertType=SERVER
Fri Oct 16 20:40:20 2015 VERIFY OK: depth=0, /C=US/ST=LEE/O=OpenVPN/OU=IT/CN=server/emailAddress=test@test.com
Fri Oct 16 20:40:20 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct 16 20:40:20 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct 16 20:40:20 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct 16 20:40:20 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct 16 20:40:20 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Oct 16 20:40:20 2015 [server] Peer Connection Initiated with 172.168.10.203:1194
Fri Oct 16 20:40:22 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Oct 16 20:40:22 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 208.67.222.222,route 192.168.137.1,topology net30,ping 10,ping-restart 120,ifconfig 192.168.137.6 192.168.137.5'
Fri Oct 16 20:40:22 2015 OPTIONS IMPORT: timers and/or timeouts modified
Fri Oct 16 20:40:22 2015 OPTIONS IMPORT: --ifconfig/up options modified
Fri Oct 16 20:40:22 2015 OPTIONS IMPORT: route options modified
Fri Oct 16 20:40:22 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Oct 16 20:40:22 2015 ROUTE default_gateway=172.168.10.1
Fri Oct 16 20:40:22 2015 TAP-WIN32 device [MyTap] opened: \\.\Global\{9AEEFFF8-2117-470D-B692-357628C43C65}.tap
Fri Oct 16 20:40:22 2015 TAP-Win32 Driver Version 9.7 
Fri Oct 16 20:40:22 2015 TAP-Win32 MTU=1500
Fri Oct 16 20:40:22 2015 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.137.6/255.255.255.252 on interface {9AEEFFF8-2117-470D-B692-357628C43C65} [DHCP-serv: 192.168.137.5, lease-time: 31536000]
Fri Oct 16 20:40:22 2015 Successful ARP Flush on interface [10] {9AEEFFF8-2117-470D-B692-357628C43C65}
Fri Oct 16 20:40:27 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Oct 16 20:40:27 2015 C:\WINDOWS\system32\route.exe ADD 172.168.10.203 MASK 255.255.255.255 172.168.10.1
Fri Oct 16 20:40:27 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Fri Oct 16 20:40:27 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:40:27 2015 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.137.5
Fri Oct 16 20:40:27 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Oct 16 20:40:27 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:40:27 2015 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.137.5
Fri Oct 16 20:40:27 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Oct 16 20:40:27 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:40:27 2015 C:\WINDOWS\system32\route.exe ADD 192.168.137.1 MASK 255.255.255.255 192.168.137.5
Fri Oct 16 20:40:27 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Oct 16 20:40:27 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:40:27 2015 Initialization Sequence Completed

Here is the log for the non working machine ( all the logs are the same)

Fri Oct 16 20:42:04 2015 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010
Fri Oct 16 20:42:04 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Oct 16 20:42:04 2015 LZO compression initialized
Fri Oct 16 20:42:04 2015 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Oct 16 20:42:04 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Oct 16 20:42:04 2015 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Oct 16 20:42:04 2015 Local Options hash (VER=V4): '41690919'
Fri Oct 16 20:42:04 2015 Expected Remote Options hash (VER=V4): '530fdded'
Fri Oct 16 20:42:04 2015 UDPv4 link local: [undef]
Fri Oct 16 20:42:04 2015 UDPv4 link remote: 172.168.10.203:1194
Fri Oct 16 20:42:04 2015 TLS: Initial packet from 172.168.10.203:1194, sid=f22fc63b f9c78266
Fri Oct 16 20:42:05 2015 VERIFY OK: depth=1, /C=US/ST=LEE/L=FortMyers/O=OpenVPN/OU=IT/CN=Plex/emailAddress=test@test.com
Fri Oct 16 20:42:05 2015 VERIFY OK: nsCertType=SERVER
Fri Oct 16 20:42:05 2015 VERIFY OK: depth=0, /C=US/ST=LEE/O=OpenVPN/OU=IT/CN=server/emailAddress=test@test.com
Fri Oct 16 20:42:05 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct 16 20:42:05 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct 16 20:42:05 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct 16 20:42:05 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct 16 20:42:05 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Oct 16 20:42:05 2015 [server] Peer Connection Initiated with 172.168.10.203:1194
Fri Oct 16 20:42:07 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Oct 16 20:42:07 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 208.67.222.222,route 192.168.137.1,topology net30,ping 10,ping-restart 120,ifconfig 192.168.137.10 192.168.137.9'
Fri Oct 16 20:42:07 2015 OPTIONS IMPORT: timers and/or timeouts modified
Fri Oct 16 20:42:07 2015 OPTIONS IMPORT: --ifconfig/up options modified
Fri Oct 16 20:42:07 2015 OPTIONS IMPORT: route options modified
Fri Oct 16 20:42:07 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Oct 16 20:42:07 2015 ROUTE default_gateway=172.168.10.1
Fri Oct 16 20:42:07 2015 TAP-WIN32 device [MyTap] opened: \\.\Global\{D646FA4B-2EF3-49D1-94E4-6513B3FF419E}.tap
Fri Oct 16 20:42:07 2015 TAP-Win32 Driver Version 9.7 
Fri Oct 16 20:42:07 2015 TAP-Win32 MTU=1500
Fri Oct 16 20:42:07 2015 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.137.10/255.255.255.252 on interface {D646FA4B-2EF3-49D1-94E4-6513B3FF419E} [DHCP-serv: 192.168.137.9, lease-time: 31536000]
Fri Oct 16 20:42:07 2015 Successful ARP Flush on interface [7] {D646FA4B-2EF3-49D1-94E4-6513B3FF419E}
Fri Oct 16 20:42:12 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Oct 16 20:42:12 2015 C:\WINDOWS\system32\route.exe ADD 172.168.10.203 MASK 255.255.255.255 172.168.10.1
Fri Oct 16 20:42:12 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Fri Oct 16 20:42:12 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:42:12 2015 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.137.9
Fri Oct 16 20:42:12 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Oct 16 20:42:12 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:42:12 2015 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.137.9
Fri Oct 16 20:42:12 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Oct 16 20:42:12 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:42:12 2015 C:\WINDOWS\system32\route.exe ADD 192.168.137.1 MASK 255.255.255.255 192.168.137.9
Fri Oct 16 20:42:12 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Oct 16 20:42:12 2015 Route addition via IPAPI succeeded [adaptive]
Fri Oct 16 20:42:12 2015 Initialization Sequence Completed

I am able to Ping the Server from the not working clients, but if I ping anything else it so not work.

mole

I did some more testing and it looks like the reason that the Windows 10 machine worked will the others did not was do to Windows 10 leaking my DNS.
When I push the DNS server I have on my network all the machines are able to access the internet through my tunnel.

Any Ideas would be great

Traffic

mole wroteCurrently I was able to get 1 computer to work fine where it has full access to the internet.
All the other machines I have tried are able to connect to the Server, but they do not have any network.
The working machine is running Windows 10, while the other machines are running Windows 8.1

mole wroteI did some more testing and it looks like the reason that the Windows 10 machine worked
will the others did not was do to Windows 10 leaking my DNS. When I push the DNS server
I have on my network all the machines are able to access the internet through my tunnel.

This does not make sense .. please try to be accurate.

Regarding W10 DNS leak:
https://forums.openvpn.net/topic19728.html

Regarding the network problems:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

You may also find this useful:
https://community.openvpn.net/openvpn/wiki/NatHack