Hello,
Looking in the /var/log/syslog I can see the requests are from my public IP address and not from my private IP from network 10.8.0.0 over tun0.
Of course I'm connected as client from my workstation.
I think my access must be from 10.8.0.0 and not from my public IP address.
# openvpn client1.ovpn
Mon Mar 7 16:37:13 2016 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
Mon Mar 7 16:37:13 2016 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Mar 7 16:37:13 2016 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Mon Mar 7 16:37:13 2016 UDPv4 link local: [undef]
Mon Mar 7 16:37:13 2016 UDPv4 link remote: [AF_INET]1234:1194
Mon Mar 7 16:37:14 2016 TLS: Initial packet from [AF_INET]1234:1194, sid=4f8f0542 aa41ca8f
Mon Mar 7 16:37:15 2016 VERIFY OK: depth=1, C=UY, ST=UY, L=Montevideo, O=xxxxxx, CN=xxxxxx CA,
emailAddress=xxxxxxxxxxx
Mon Mar 7 16:37:15 2016 VERIFY OK: nsCertType=SERVER
Mon Mar 7 16:37:15 2016 VERIFY OK: depth=0, C=UY, ST=UY, L=Montevideo, O=xxxxxxxx, CN=server,
emailAddress=xxxxxxxxx
Mon Mar 7 16:37:17 2016 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Mar 7 16:37:17 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 7 16:37:17 2016 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Mar 7 16:37:17 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 7 16:37:17 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Mar 7 16:37:17 2016 [server] Peer Connection Initiated with [AF_INET]104.238.131.199:1194
Mon Mar 7 16:37:19 2016 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Mar 7 16:37:19 2016 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mon Mar 7 16:37:19 2016 OPTIONS IMPORT: timers and/or timeouts modified
Mon Mar 7 16:37:19 2016 OPTIONS IMPORT: --ifconfig/up options modified
Mon Mar 7 16:37:19 2016 OPTIONS IMPORT: route options modified
Mon Mar 7 16:37:19 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Mar 7 16:37:19 2016 ROUTE_GATEWAY 192.168.13.1/255.255.255.0 IFACE=wlan0 HWADDR=dc:85:de:8f:9f:25
Mon Mar 7 16:37:19 2016 TUN/TAP device tun0 opened
Mon Mar 7 16:37:19 2016 TUN/TAP TX queue length set to 100
Mon Mar 7 16:37:19 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Mar 7 16:37:19 2016 /sbin/ip link set dev tun0 up mtu 1500
Mon Mar 7 16:37:19 2016 /sbin/ip addr add dev tun0 local 10.8.0.6 peer 10.8.0.5
Mon Mar 7 16:37:19 2016 /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Mon Mar 7 16:37:19 2016 GID set to nogroup
Mon Mar 7 16:37:19 2016 UID set to nobody
Mon Mar 7 16:37:19 2016 Initialization Sequence Completed
In the server log, in this case, the ip showed as SRC connection should be 10.8.0.x
Any idea?