Gashu Hi all, I have a serious issue. While in the country where the OpenVPN is installed i get connected to the network, but when am outside the country it doesn't get connected. I checked the logs and realized that from outside, the client doesn't even reach the firewall(where the OpenVPN is installed). What means it's being blocked somewhere, though the traceroute shows that it reaches the firewall. Anyone who had had such issue ou who will have any idea of what should be the cause, he/she may give some tips on how to solve the issue. Thanks.
Gashu Server side port 2205 proto tcp-server dev tun0 ca ca.crt cert xxxx.crt key xxxxxx.key tls-auth xxxxxx.key 0 dh dh1024.pem server 10.22.76.0 255.255.255.0 push "route 10.22.3.0 255.255.255.0" topology subnet mode server tls-server ifconfig-pool-persist /var/log/openvpn/ipp.txt client-config-dir ccd push "dhcp-option DNS xxxxx" push "dhcp-option WINS xxxxx" push "persist-key" push "persist-tun" push "comp-lzo" push "sndbuf 393216" push "rcvbuf 393216" sndbuf 0 rcvbuf 0 client-to-client keepalive 10 120 cipher AES-256-CBC comp-lzo max-clients 200 max-clients 200 user secureuser group secureuser persist-key persist-tun tcp-nodelay reneg-sec 432000 status /var/log/openvpn/openvpn-status.log log-append /var/log/openvpn/openvpn.log verb 4 mute 10 mssfix 1400 tun-mtu 1500 auth-user-pass-verify /etc/openvpn/openvpn-admin/scripts/login.sh via-env client-cert-not-required username-as-common-name script-security 3 execve client-connect /etc/openvpn/openvpn-admin/scripts/connect.sh client-disconnect /etc/openvpn/openvpn-admin/scripts/disconnect.sh learn-address /etc/openvpn/openvpn-admin/scripts/learn-address.sh up /etc/openvpn/openvpn-admin/scripts/startup.sh plugin /usr/lib/openvpn/openvpn-down-root.so "/etc/openvpn/openvpn-admin/scripts/startup.sh --down" Client Side client dev tun proto tcp remote xxxxx 2205 resolv-retry infinite nobind persist-key persist-tun ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt" tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\xxxx.key" 1 ns-cert-type server cipher AES-256-CBC comp-lzo yes verb 3 reneg-sec 432000 tun-mtu 1500 route-method exe auth-nocache auth-user-pass mute 20
Traffic Gashu wroteServer side port 2205 proto tcp-serverYou could try port 443 (HTTPS) but it may still be blocked. (remember to change the client side as well)
Gashu I finally found the solution, the port was only allowed to specific country in iptables. Thanks.
