network_buddy
Hi Community,
I set up a OVPN AS on a Ubuntu distribution and it works pretty well so far. It builds up a L3 Tunnel (NAT/not all internet traffic/no DNS changes on clients) and I can reach pretty much everything in my connected LAN (Seafile/Loadmasters etc.) But I have another Linux Server running in the LAN and I am not able to connect to it when connected via VPN. It just times out. I set up an AS two years ago with almost the same settings (pretty much everything is default) and it works great. Why is that? What have I done wrong? I think it is just a small stupid mistake by myself but I didn't get it.
By the way: The IP of the server is pingable an I can reach its HTTPS Service via Browser. It is just SSH which times out.
The Johan
Not sure yet but you can try tcpdump and ping and traceroute to see how the traffic flow is. Figure out where the packets go. And read the SSH logs on the SSH server to see if anything at all happens, and run tcpdump on the SSH server system to see if any initial connection attempts get through.
At a guess, some routing conflict sending the traffic to the wrong server, or asymmetrical routing meaning traffic going in follows one path, return traffic follows another path, which is not good.
network_buddy
Asymmetrical routing might be a good point. But as HTTP traffic is working. By the time I found another service whoch is not running properly. Seafile in Browser works, but the Seafile client does not. FTP is not working too. It looks like only HTTP passing the tunnel.
I will now change the setting on the AS that all traffic is going through the tunnel not only LAN traffic and will see what will happen then.
network_buddy
OK, changed to all internet traffic through tunnel and use tunnel DNS, now everything is working fine.
The Johan
I am thinking that it's likely that it was asymmetrical routing that was the problem then.
