can't access network over server and client

pag66

Hello this is my first post, I'm having a problem to ping over my server and client network, only can access client and server vpn ips, I read how to but still have problem here is my network:
Server and client are gateways and have their own internet connection, i just want to share aplication between them, went i start server all my trafic is redirectec through the vpn, and i dont to make that, please give a hand I really confused

eno2: 192.168.1.0/24 local net | | eth1:192.168.0.0/24 local net |
eno1: public ip | | eth0:public IP |
tun: 192.168.37.0 vpn net | | tun:192.168.37.0/24 vpn net |
================ ==================
SERVER CLIENT
I'm using openvpn 2.3.10

server.conf

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
ifconfig-pool-persist ipp.txt
server 192.168.37.0 255.255.255.0
route 192.168.1.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
client-config-dir ccd
route 192.168.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
log-append openvpn.log
verb 4

client

client
dev tun
proto udp
remote ipremote 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
ns-cert-type server
comp-lzo
log-append openvpn.log
verb 4

log server

Tue Mar  1 11:59:47 2016 us=549514 privIP:50066 MULTI_sva: pool returned IPv4=192.168.37.6, IPv6=(Not enabled)
Tue Mar  1 11:59:47 2016 us=549542 privIP:50066 MULTI: Learn: 192.168.37.6 -> uio.colimpo.com.ec/186.101.0.212:50066
Tue Mar  1 11:59:47 2016 us=549549 privIP:50066 MULTI: primary virtual IP for uio.colimpo.com.ec/186.101.0.212:50066: 192.168.37.6
Tue Mar  1 11:59:49 2016 us=467286 privIP:50066 PUSH: Received control message: 'PUSH_REQUEST'
Tue Mar  1 11:59:49 2016 us=467302 privIP:50066 send_push_reply(): safe_cap=940
Tue Mar  1 11:59:49 2016 us=467314 privIP:50066 SENT CONTROL [uio.colimpo.com.ec]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.37.1,topology net30,ping 10,ping-restart 120,ifconfig 192.168.37.6 192.168.37.5' (status=1)
Tue Mar  1 12:09:02 2016 us=511283 privIP:50066 MULTI: bad source address from client [192.168.0.205], packet dropped
Tue Mar  1 12:09:07 2016 us=382597 privIP:50066 MULTI: bad source address from client [192.168.0.205], packet dropped
Tue Mar  1 12:09:12 2016 us=383043 privIP:50066 MULTI: bad source address from client [192.168.0.205], packet dropped
Tue Mar  1 12:09:17 2016 us=382294 privIP:50066 MULTI: bad source address from client [192.168.0.205], packet dropped

log client

Tue Mar  1 12:12:28 2016 us=375185 LZO compression initialized
Tue Mar  1 12:12:28 2016 us=375289 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Mar  1 12:12:28 2016 us=375338 Socket Buffers: R=[129024->129024] S=[129024->129024]
Tue Mar  1 12:12:28 2016 us=375373 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Mar  1 12:12:28 2016 us=375400 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Mar  1 12:12:28 2016 us=375409 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Mar  1 12:12:28 2016 us=375436 Local Options hash (VER=V4): '41690919'
Tue Mar  1 12:12:28 2016 us=375452 Expected Remote Options hash (VER=V4): '530fdded'
Tue Mar  1 12:12:28 2016 us=375471 UDPv4 link local: [undef]
Tue Mar  1 12:12:28 2016 us=375492 UDPv4 link remote: [AF_INET]186.101.6.51:1194
Tue Mar  1 12:12:28 2016 us=387775 TLS: Initial packet from [AF_INET]186.101.6.51:1194, sid=c747562b d816ce34
Tue Mar  1 12:12:28 2016 us=404866 VERIFY OK: depth=1, C=EC, ST=Guayas, L=Guayaquil, O=Colimpo, OU=TIC, CN=, name=EasyRSA, emailAddress=XXX@mail.com
Tue Mar  1 12:12:28 2016 us=405211 VERIFY OK: nsCertType=SERVER
Tue Mar  1 12:12:28 2016 us=405223 VERIFY OK: depth=0, C=EC, ST=Guayas, L=Guayaquil, O=XXXX, OU=TIC, CN=XXXXX, name=EasyRSA, emailAddress=XXXXX
Tue Mar  1 12:12:28 2016 us=467346 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Mar  1 12:12:28 2016 us=467365 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar  1 12:12:28 2016 us=467431 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Mar  1 12:12:28 2016 us=467443 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar  1 12:12:28 2016 us=467475 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Mar  1 12:12:28 2016 us=467497 [server] Peer Connection Initiated with [AF_INET]186.101.6.51:1194
Tue Mar  1 12:12:30 2016 us=729257 SENT CONTROL [sever]: 'PUSH_REQUEST' (status=1)
Tue Mar  1 12:12:30 2016 us=740008 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.37.1,topology net30,ping 10,ping-restart 120,ifconfig 192.168.37.6 192.168.37.5'
Tue Mar  1 12:12:30 2016 us=740095 OPTIONS IMPORT: timers and/or timeouts modified
Tue Mar  1 12:12:30 2016 us=740105 OPTIONS IMPORT: --ifconfig/up options modified
Tue Mar  1 12:12:30 2016 us=740113 OPTIONS IMPORT: route options modified
Tue Mar  1 12:12:30 2016 us=740257 ROUTE_GATEWAY IP/255.255.255.248 IFACE=eth0 HWADDR=00:1c:c0:94:2a:46
Tue Mar  1 12:12:30 2016 us=740459 TUN/TAP device tun0 opened
Tue Mar  1 12:12:30 2016 us=740497 TUN/TAP TX queue length set to 100
Tue Mar  1 12:12:30 2016 us=740513 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Mar  1 12:12:30 2016 us=740541 /sbin/ip link set dev tun0 up mtu 1500
Tue Mar  1 12:12:30 2016 us=746476 /sbin/ip addr add dev tun0 local 192.168.37.6 peer 192.168.37.5
Tue Mar  1 12:12:30 2016 us=747496 /sbin/ip route add 192.168.1.0/24 via 192.168.37.5
Tue Mar  1 12:12:30 2016 us=748288 /sbin/ip route add 192.168.37.1/32 via 192.168.37.5
Tue Mar  1 12:12:30 2016 us=749014 Initialization Sequence Completed

ccd

iroute 192.168.0.0 255.255.255.0

route client

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.37.1    192.168.37.5    255.255.255.255 UGH   0      0        0 tun0
192.168.37.5    0.0.0.0         255.255.255.255 UH    0      0        0 tun0
186.101.0.208   0.0.0.0         255.255.255.248 U     0      0        0 eth0
192.168.1.0     192.168.37.5    255.255.255.0   UG    0      0        0 tun0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth1
0.0.0.0         186.101.0.209   0.0.0.0         UG    0      0        0 eth0

route server

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         186.101.6.49    0.0.0.0         UG    100    0        0 eno1
186.101.6.48    0.0.0.0         255.255.255.252 U     100    0        0 eno1
192.168.0.0     192.168.37.2    255.255.255.0   UG    0      0        0 tun0
192.168.1.0     192.168.37.2    255.255.255.0   UG    0      0        0 tun0
192.168.1.0     0.0.0.0         255.255.255.0   U     100    0        0 eno2
192.168.37.0    192.168.37.2    255.255.255.0   UG    0      0        0 tun0
192.168.37.2    0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0

iptables

iptables -A INPUT -i eno1 -m state --state NEW -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD -i tun0 -o eno2 -s 192.168.37.0/24 -d 192.168.1.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -i tun0 -o eno1 -s 192.168.37.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -i eno2 -o eno1 -s 192.168.1.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

Thanks for yout help
Greetings

Traffic

This:

pag66 wrotelog server

Tue Mar  1 12:09:02 2016 us=511283 privIP:50066 MULTI: bad source address from client [192.168.0.205], packet dropped

suggests your server has not read your client CCD file .. check the name of the client and the name of the file match.

pag66

Thanks a lot for the help, I'm using remote desktop to trying from a machine in the server side,but when I start the VPN i cannot connect to my remote desktop, here is my iptables.

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  eno2   any     anywhere             anywhere             udp spts:bootps:bootpc dpts:bootps:bootpc
    0     0 ACCEPT     all  --  lo     any     anywhere             anywhere            
   14 21000 ACCEPT     all  --  any    any     anywhere             anywhere             state RELATED,ESTABLISHED
    0     0 ACCEPT     all  --  eno2   any     anywhere             anywhere            
    0     0 ACCEPT     tcp  --  any    any     192.168.0.0/24       anywhere             tcp dpt:domain
    0     0 ACCEPT     udp  --  any    any     192.168.0.0/24       anywhere             udp dpt:domain
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere             tcp dpt:ssh
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere             state NEW tcp dpt:http
    0     0 ACCEPT     tcp  --  eno2   any     anywhere             anywhere             tcp dpt:squid
    0     0 ACCEPT     udp  --  eno1   any     anywhere             anywhere             state NEW udp dpt:openvpn
    0     0 DROP       all  --  any    any     125.88.177.90        anywhere            
    0     0 LOG        all  --  any    any     anywhere             anywhere             LOG level warning

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  any    any     192.168.1.100        anywhere             tcp dpt:https STRING match  "facebook.com" ALGO name bm TO 65535
    0     0 ACCEPT     tcp  --  any    any     192.168.1.18         anywhere             tcp dpt:https STRING match  "facebook.com" ALGO name bm TO 65535
    0     0 ACCEPT     tcp  --  any    any     192.168.1.12         anywhere             tcp dpt:https STRING match  "facebook.com" ALGO name bm TO 65535
    0     0 DROP       tcp  --  any    any     anywhere             anywhere             tcp dpt:https STRING match  "facebook.com" ALGO name bm TO 65535
    2   180 ACCEPT     all  --  eno2   eno1    anywhere             anywhere            

Chain OUTPUT (policy ACCEPT 9 packets, 468 bytes)
 pkts bytes target     prot opt in     out     source               destination

please give a hint and sorry for the silly question

Traffic

Have you tried MASQUERADE ?

iptables -t nat -A POSTROUTING -s vpn-subnet/CIDR -o interface-name -j MASQUERADE