I have the following configuration [debian openvz host with openvpn] -> [openvz vserver] -> working fine [debian openvz host with openvpn] -> [openvz vpn vserver] -> [list]Workstation access via internet : working Putty Console via internet : working but no access from [openvpn Vserver] to internte: no ping to any IP outside Ping to [debian openvz host with openvpn] working [/list] any idea which configuration might be wrong?

As you have not posted your openvpn config files, please see the HOWTO: [list][*][url=http://openvpn.net/index.php/open-source/documentation/howto.html]HOWTO: For OpenVPN Community Edition[/url] [*][url=http://openvpn.net/index.php/open-source/documentation/howto.html#scope]HOWTO: Expanding the scope of the VPN to include additional machines[/url] [*][url=http://openvpn.net/index.php/open-source/documentation/howto.html#redirect]HOWTO: Routing all client traffic (including web-traffic) through the VPN[/url][/list] The iptables rule you require for NAT on openvz is: [code]iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 12.34.56.78 #

openvz/vpn vserver no ping to internete

kk770

I have the following configuration

[debian openvz host with openvpn] -> [openvz vserver] -> working fine

[debian openvz host with openvpn] -> [openvz vpn vserver] ->

Workstation access via internet : working
Putty Console via internet : working
but no access from [openvpn Vserver] to internte: no ping to any IP outside
Ping to [debian openvz host with openvpn] working

any idea which configuration might be wrong?

TinCanTech

Please post your server iptables configuration. (ie: Have you enabled NAT)

kk770

#iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
RETURN all -- 192.168.122.0/24 base-address.mcast.net/24
RETURN all -- 192.168.122.0/24 255.255.255.255
MASQUERADE tcp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
MASQUERADE udp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
MASQUERADE all -- 192.168.122.0/24 !192.168.122.0/24

TinCanTech

As you have not posted your openvpn config files, please see the HOWTO:

The iptables rule you require for NAT on openvz is:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 12.34.56.78   # <-- Use your OpenVPN server's real external IP here

kk770

Great thank you
it is working.
Knut