No internet if redirect-gateway is not used

marco208

Hello,

I've been trying to get L2TP/IPSec working on my linux laptop, but so far I've had no luck. So I tried OpenVPN. OpenVPN works great! But I've been trying to get it working with just 1 or 2 ranges. This doesn't work. For now I'm first trying to get this working on my Windows machine.

when I disable:

;push "redirect-gateway def1 bypass-dhcp"

and enable:

push "route 188.64.64.0 255.255.255.0"

When I surf to http://myip.nl my connection stalls and after it receives a time out it connects over the normal network connection. (windows removes the route after the timeout)

server.conf

port 1194

proto udp

dev tap0

ca ca.crt
cert server.crt

dh dh2048.pem

topology subnet

ifconfig-pool-persist ipp.txt

server-bridge my.main.ip.50 255.255.255.0 my.main.ip.51 my.main.ip.51

push "route 188.64.64.0 255.255.255.0"

keepalive 10 120

user nobody
group nobody

persist-key
persist-tun

status openvpn-status.log

verb 3

client.ovpn

client
dev tap
proto udp
remote my.main.ip.50 1194
resolv-retry infinite
persist-key
persist-tun
verb 3
<cert>
</cert>
<ca>
</ca>
<key>
</key>

I hope someone has a golden tip for me! Thanks in advance!

Traffic

marco208 wroteserver-bridge my.main.ip.50

Are you bridging a public network ?

marco208

Yes, I'm connecting to a server in a datacenter, I use a "private" public internet IP adres, is this not how it works? Note that when I send all traffic it works perfect. (DNS is very slow somehow)

Traffic

Have you tried with a routed tunnel ?

marco208

Yes, i have a server running with a public IP, I use that IP to connect to other servers within the network (they all have public IP addresses). It does work when I send all traffic. (DNS, or setting up connections is very slow though)

marco208

I use a routed tunnel at the moment, went back to an old configuration. With this configuration it's still not possible to disable that default-gateway option and push routes to the client (well, they are there, but I cant connect to any of the IPs in the routes that have been pushed)

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 64.6.64.6"
push "dhcp-option DNS 209.244.0.3"
keepalive 10 120
cipher BF-CBC        # Blowfish (default)
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3