I've set up an OpenVPN server using instructions below: [url]http://www.emaculation.com/doku.php/bridged_openvpn_server_setup[/url] Although I didn't get the exact point of "Port Forwarding" section and didn't do anything about that, except enabling it over IPv4 at the server side, I've got successfully connected to it from the internet, but no traffic goes inside this server and I'm receiving data from my own internet line. I myself doubt about the "Port Forwarding" and IP settings, but actually don't know what's going on and why this happens. Here is my server.conf file: [code]port 1194 proto udp dev tap0 ca /etc/openvpn/easy-rsa/keys/ca.crt cert /etc/openvpn/easy-rsa/keys/server.crt key /etc/openvpn/easy-rsa/keys/server.key dh /etc/openvpn/easy-rsa/keys/dh2048.pem remote-cert-tls client server-bridge 172.16.36.100 255.255.255.0 172.16.36.101 172.16.36.110 client-to-client keepalive 10 120 comp-lzo persist-key persist-tun status /var/log/openvpn-status.log log-append /var/log/openvpn.log verb 3[/code] And here is the client.ovpn file: [code]client dev tap0 proto udp remote 60.50.40.190 1194 persist-key persist-tun ca ca.crt cert client.crt key client.key remote-cert-tls server comp-lzo verb 3[/code] There also is a openvpn-bridge file script that I've modified as below: [code]#!/bin/sh # Define Bridge Interface br="br0" # Define list of TAP interfaces to be bridged, # for example tap="tap0 tap1 tap2". tap="tap0" # Define physical ethernet interface to be bridged # with TAP interface(s) above. eth="eth0" eth_ip="60.50.40.190" eth_netmask="255.255.255.248" eth_broadcast="60.50.40.191" eth_gateway="60.50.40.185" case "$1" in start) for t in $tap; do openvpn --mktun --dev $t done brctl addbr $br brctl addif $br $eth for t in $tap; do brctl addif $br $t done for t in $tap; do ifconfig $t 0.0.0.0 promisc up done sleep 1 ifconfig $eth 0.0.0.0 promisc up sleep 1 ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast sleep 1 route add default gw $eth_gateway ;; stop) ifconfig $br down brctl delbr $br for t in $tap; do openvpn --rmtun --dev $t done ifconfig $eth $eth_ip netmask $eth_netmask broadcast $eth_broadcast route add default gw $eth_gateway ;; *) echo "Usage: openvpn-bridge {start|stop}" exit 1 ;; esac exit 0[/code] Assuming that sample 60.50.40.190 is valid IP address of my server on internet and what is set on its eth0 network interface. There also is something to report and that's the br0 and tap0 interfaces which are still displayed at the output of ifconfig after stopping openvpn service and it's against what mentioned at instructions.

I've just seen the forum rules on the top and below line drew my attention: [quote]**You ONLY want to use dev tap if you are tunneling layer2 traffic, if you are using IP traffic you want tun. If you are using tap only for windows file sharing, look into running a WINS server instead.[/quote] Is that all about my problem? I've actually set up this way because of playing LAN games over OpenVPN on internet and I've needed it to relay broadcast packages just like a normal LAN.

[quote="atsiha"]br0 and tap0 interfaces which are still displayed at the output of ifconfig[/quote]Please post [b]ifconfig[/b] details. Is this a hosted or private server ?

[quote="Traffic"][quote="atsiha"]br0 and tap0 interfaces which are still displayed at the output of ifconfig[/quote]Please post [b]ifconfig[/b] details. Is this a hosted or private server ?[/quote] It's a VM on my ESXi server and it has a valid public IP. Here is the ifconfig output: [img]http://i.imgur.com/99xv8LY.jpg[/img]

From our documentation: [quote]Make sure to only bridge TAP interfaces with [u]private ethernet interfaces[/u] which are protected behind a firewall. Never bridge a TAP interface with the same ethernet interface you use to connect to the internet[/quote]See: [url]https://openvpn.net/index.php/open-source/documentation/miscellaneous/ethernet-bridging.html[/url]

[quote="Traffic"]From our documentation: [quote]Make sure to only bridge TAP interfaces with [u]private ethernet interfaces[/u] which are protected behind a firewall. Never bridge a TAP interface with the same ethernet interface you use to connect to the internet[/quote]See: [url]https://openvpn.net/index.php/open-source/documentation/miscellaneous/ethernet-bridging.html[/url][/quote] So you mean I need to add another NIC and also enable the firewall? If so, what rules should I add to the iptables?

[quote="atsiha"]It's a VM on my ESXi server and it has a valid public IP[/quote]Is the Host for the VM a privately owned server or a VMS / VZ server from a hosting company ?

[quote="Traffic"][quote="atsiha"]It's a VM on my ESXi server and it has a valid public IP[/quote]Is the Host for the VM a privately owned server or a VMS / VZ server from a hosting company ?[/quote] It's my own rented dedicated server from our data center partner which VMware ESXi installed on.

Is eth0 directly connected to the internet with a public IP address or is it behind a firewall ?

[quote="Traffic"]Is eth0 directly connected to the internet with a public IP address or is it behind a firewall ?[/quote] No, It's directly connected with a public IP address. There is no firewall.

[quote="atsiha"]I've actually set up this way because of playing LAN games over OpenVPN[/quote]I suggest you do it internally to the LAN before your ISP shuts your internet down for flooding the segment ... use a test machine not a production system. :roll:

OpenVPN connects but traffic is not handling by the tunnel

atsiha

If anyone could config such a thing for me, I would assign this project to him with a good wage.

Traffic

See my profile if you want to take this further ..

atsiha

Traffic wroteSee my profile if you want to take this further ..

I've checked that before, but there is no way to contact in private.

Traffic

Sorry .. check again 8-)

« Previous Page