Simple site-to-site, only client & server use tun0 for reversed dns

SteveP

Topic is the question. I have a simple client/server using the following:
Network 1 - 10.0.2.X (10.0.2.1 is the OpenVPN gateway client, 10.7.0.2 tun0)
Network 2 - 10.0.0.X (10.0.0.1 is the OpenVPN gateway server, 10.7.0.1 tun0)

Everything works great with the exception of the two servers with the openvpn service. Anyone connecting from 10.0.2.X to the 10.0.0.X network resolves as the correct IP/destination (route-through) the vpn servers, and vice-versa.

The problem is: any connections over VPN from the gateway servers themselves are always 10.7.0.1 to the 10.0.2.X network, and 10.7.0.2 to the 10.0.0.X network. I'm not sure if this is something I can resolve through iptables or something in the configuration I'm missing. The config is quite simple:
server.conf -
dev tun
comp-lzo
ifconfig 10.7.0.1 10.7.0.2
secret mysecretfile.key
persist-tun
persist-key
route 10.0.2.0 255.255.255.0
user nobody
group nobody
daemon

client.conf
remote (IP of the remote server)
dev tun
comp-lzo
ifconfig 10.7.0.2 10.7.0.1
secret mysecretfile.key
persist-key
persist-tun
route 10.0.1.0 255.255.255.0
user nobody
group nobody
daemon

Again, everything works on the two networks. All connections across reverse-resolve to their appropriate IP addresses. It seems services on the gateway servers are servicing the tun0 interface (such as named, ssh, etc. etc.) - is there a simple way to fix this with openvpn, iptables or do I need to find ways to inspect individual services running to see if the tun0 device can be ignored IF that will be smart enough to then route through openvpn.

Thanks!

TinCanTech

SteveP wroteThe problem is: any connections over VPN from the gateway servers themselves are always 10.7.0.1 to the 10.0.2.X network, and 10.7.0.2 to the 10.0.0.X network.

That is correctly functioning ..

If you want these two servers to always use the ethernet IP address over the VPN then use iptables to NAT the source address .. but that is overly complicated and you really do not need to.