hi, when using "redirect-gateway def1" my server logs show (changed my ip with x.x): i Nov 6 21:21:11 2015 us=510784 skysedge/62.226.x.x:42749 MULTI: bad source address from client [62.226.x.x], packet droppe6. a lot of times... and after a few minutes i have to reboot my openwrt router because it becomes unreachable, even from my local lan. setup looks like this: [code] openwrt router(62.226.x.x with pppoe) -> vps [/code] when i do not use "redirect-gateway def1" in the ccd file the connection works. behind the openwrt router is a network (192.168.1.0) complete ccd file: [code] push "redirect-gateway def1" iroute 192.168.1.0 255.255.255.0 [/code] the iroute statement works. i can access the network behind the openwrt client from the server and other machines. so why do i get the bad source messages?

redirect-gateway def1 breaks setup. why?

newuser44

hi,

when using "redirect-gateway def1" my server logs show (changed my ip with x.x):
i Nov 6 21:21:11 2015 us=510784 skysedge/62.226.x.x:42749 MULTI: bad source address from client [62.226.x.x], packet droppe6.
a lot of times...

and after a few minutes i have to reboot my openwrt router because it becomes unreachable, even from my local lan.

setup looks like this:

openwrt router(62.226.x.x with pppoe) -> vps

when i do not use "redirect-gateway def1" in the ccd file the connection works.
behind the openwrt router is a network (192.168.1.0)

complete ccd file:

push "redirect-gateway def1"
iroute 192.168.1.0 255.255.255.0

the iroute statement works. i can access the network behind the openwrt client from the server and other machines.

so why do i get the bad source messages?

Traffic

newuser44 wrotebehind the openwrt router is a network (192.168.1.0)

complete ccd file:
Code:
push "redirect-gateway def1"
iroute 192.168.1.0 255.255.255.0

--iroute is for behind the client not the server .. See:
HOWTO: Expanding the scope of the VPN to include additional machines

What you have said sounds like you have a network conflict.

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

:arrow: Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!: