I have a Linksys e2500 flashed with DD-WRT v24-sp2 (03/25/13) big
at work. I have full access and authority to making changes to this router.
I have a working OpenVPN server on my pfsense box
at home.
On a PC I can connect to my home vpn server from anywhere.
On my phone I can connect to it using the Android OpenVPN app when I'm on
mobile data.
I do not have OpenVPN client or server configured in the e2500.
Problem:
On my phone connected to the Wifi of my work's Linksys e2500 mentioned above, I can not connect to my home's OpenVPN server. The connection times out. I'm connected to the main wifi, not guest wifi.
I suspect it has something to do with routing in the e2500's firewall rules.
#Allow guest bridge access to Internet
iptables -I FORWARD -i br1 -m state --state NEW -j ACCEPT
iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
#Block access between private and guest
iptables -I FORWARD -i br0 -o br1 -m state --state NEW -j DROP
iptables -I FORWARD -i br1 -d 192.9.200.0/24 -m state --state NEW -j DROP
iptables -I FORWARD -i br1 -d 192.9.201.0/24 -m state --state NEW -j DROP
iptables -I FORWARD -i br1 -d 192.9.203.0/24 -m state --state NEW -j DROP
iptables -I FORWARD -i br1 -d `nvram get lan_ipaddr`/`nvram get lan_netmask` -m state --state NEW -j DROP
#NAT to make Internet work
#iptables -t nat -I POSTROUTING -o br0 -j SNAT --to `nvram get lan_ipaddr`
iptables -t nat -I POSTROUTING -s 192.168.5.0/24 -j SNAT --to `nvram get lan_ipaddr`
#Block guest access to router services
iptables -I INPUT -i br1 -p tcp --dport telnet -j REJECT --reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp --dport ssh -j REJECT --reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp --dport www -j REJECT --reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp --dport https -j REJECT --reject-with tcp-reset
The above rules pertain to a working guest wifi network that only has internet access and is blocked from all subnets on the lan.
Anyway, I have very little understanding of the rules above. I simply pieced them together from some guides online and some help from this forum in the past.
Therefore, I don't know why my OpenVPN client on my android can not connect to my home OpenVPN server when I'm connected to my work's ddwrt router.
Thanks in advance for any help.
