czarekplpl Hello. I cannot get any ping except my server. Only get the connection between the server and my location. Can anybody help me how to find the problem?? [root@czaro ~]# uname -a Linux czaro 2.6.32-042stab116.2 #1 SMP Fri Jun 24 15:33:57 MSK 2016 x86_64 x86_64 x86_64 GNU/Linux [root@czaro ~]# route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0 169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 venet0 0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 venet0 [root@czaro ~]# ifconfig lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500 inet 10.8.0.1 netmask 255.255.255.255 destination 10.8.0.2 unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC) RX packets 704 bytes 191694 (187.2 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 venet0: flags=211<UP,BROADCAST,POINTOPOINT,RUNNING,NOARP> mtu 1500 inet 127.0.0.1 netmask 255.255.255.255 broadcast 0.0.0.0 destination 127.0.0.1 inet6 2402:9e80:0:1000::1:fe7d prefixlen 128 scopeid 0x0<global> unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 0 (UNSPEC) RX packets 31265 bytes 5378790 (5.1 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 23117 bytes 3800358 (3.6 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 venet0:0: flags=211<UP,BROADCAST,POINTOPOINT,RUNNING,NOARP> mtu 1500 inet 45.xxx.64.3xx netmask 255.255.255.255 broadcast 45.xxx.64.xx destination 45.xxx.64.xx unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 0 (UNSPEC) Server.conf % client-to-client persist-key persist-tun ca /etc/openvpn/ssl/ca.crt cert /etc/openvpn/ssl/czaro.crt comp-lzo adaptive dev tun dh /etc/openvpn/ssl/dh.pem ifconfig-pool-persist server-ipp.txt 0 keepalive 10 120 key /etc/openvpn/ssl/czaro.key tls-auth /etc/openvpn/ssl/ta.key 0 cipher AES-256-CBC auth SHA512 tls-version-min 1.2 tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 log /var/log/openvpn/server.log port 1194 proto udp server 10.8.0.0 255.255.255.0 verb 3 crl-verify /etc/openvpn/ssl/crl.pem route 10.8.0.0 255.255.255.0 push "route 10.8.0.0 255.255.255.0" push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" Client.ovpn client dev tun proto udp port 1194 remote x.x.x.x 1194 udp remote-cert-tls server resolv-retry infinite nobind persist-key persist-tun comp-lzo verb 3 cipher AES-256-CBC auth SHA512 tls-version-min 1.2 tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 auth-nocache redirect-gateway def1 <ca> -----BEGIN CERTIFICATE----- MIIDITCCAgmgAwIBAgIJAJWB6p9znIp7MA0GCSqGSIb3DQEBCwUAMBAxDjAMBgNV BAMMBWN6YXJvMB4XDTE4MDUyMDEwMjAzOVoXDTI4MDUxNzEwMjAzOVowEDEOMAwG A1UEAwwFY3phcm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpCBU gl5u0DCBdb6aaLzBNSDqDUzF499l0bdS1JwrGb15oS+Z2hVCxnoWVFpuCN7UqdPH EzYGI2F/VbJP2A2YiWgw2rJWaqJeRM3OOCRZV30GvNej/c+ehQEOnOpHm4ygfbUJ De8sxpViIw0WjT4nuQ688xd99DJvCCQR6s9JOIfH9Pq5/FaC41MXS9VyPiY4MHnn bN9fSXmKil5p3oDXe62w/qRqiwZy6nJG+uk6rzFMzhsmFUd6kTlXQIZ+RnBekbgH 6RIDh2oRtfY2WDqrVE9J3HRfNAtcsMZ7LA+VRCwgVzMLQZJj4wgVIk27FbzlpAxE japn3DE3qcEEqSCPAgMBAAGjfjB8MB0GA1UdDgQWBBQwN3idIvdjNCYQn1E1hZYS WkVuBzBABgNVHSMEOTA3gBQwN3idIvdjNCYQn1E1hZYSWkVuB6EUpBIwEDEOMAwG A1UEAwwFY3phcm+CCQCVgeqfc5yKezAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIB BjANBgkqhkiG9w0BAQsFAAOCAQEAVn2nAzX6obHASr6R7+g8n1R1eSCBJ/XYfbfq EOsoB/x3gBlje/BXpaYg+5jzbrTaNW2jYf3QqoSkp/AxWp1O/bOKmUQrwt5kJ/Xk JXTxkC1XZfrm/8zAvZupY64XnmHdDCFtE0XGHJ/Wei3jy6VBPzC1QYTESzVb3BZ4 RdRXzOLvHZAAZ/1gayFcSjISiDUcmLL0e88tW66MlH7LTNC4fb5oFoDkIL1phEvX 7J81qI5Zn2X9vD0w/hEEKKjPZw2F8N+RdRyAVAedocm5MKICCDlwKcDhw0xXtRrE LS7PN4+Ae3w6hV/77kr6/I38pybtph9MuTINPBlQnUY7WAOZXQ== -----END CERTIFICATE----- </ca> <cert> -----BEGIN CERTIFICATE----- MIIDPTCCAiWgAwIBAgIQLqLOjFnKah3cqJkNzkUrgDANBgkqhkiG9w0BAQsFADAQ MQ4wDAYDVQQDDAVjemFybzAeFw0xODA1MjAxMDI4NTBaFw0yODA1MTcxMDI4NTBa MBExDzANBgNVBAMMBm5pdW5pdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDX3/Qsd8bzuWUcbRri/awGsHX2ylaWccLSaePeDW7bg9bh+q2HAFjnNPj/ RGYHta0FT/H7K1rfcZdqyBp6Kqp2VjUCFNQwVPJYk3gy3+Nd7fbrUBnV+dozB/PQ BYb8BwyRA5pP2gpx0S3lUqP/C81erwhDfhGRmmaSxyD9iRab0r94uijvckwbnaKj DQo+je/rmMMsmFH1wPmRdE2Nb0vg8SyYjqHon8d3ZrYZskJ+0Qfri/yu5NZEHi8k jPP1S40YDm8/Tx+7rUHzv7+8Mg0mjL5c82ABvoquDqQuBdLJOWSwFyTA36IWkEyp r7mIJoQXwlOfyz+luEXaedz6BYkCAwEAAaOBkTCBjjAJBgNVHRMEAjAAMB0GA1Ud DgQWBBS1I7ucifFKJFe/6ystthUzDRqYtjBABgNVHSMEOTA3gBQwN3idIvdjNCYQ n1E1hZYSWkVuB6EUpBIwEDEOMAwGA1UEAwwFY3phcm+CCQCVgeqfc5yKezATBgNV HSUEDDAKBggrBgEFBQcDAjALBgNVHQ8EBAMCB4AwDQYJKoZIhvcNAQELBQADggEB ADuvrAujHAsfMSGZL5g9oCkHVMYVYEAq5KUxe61Hg51zkwue0t+IQzb5w0oQcUny g2mStctCPbAlx+D3/khq5/dAeHCbwZAKO8NKp33QPtOZyjp1wno9EQrx9UrxdEoB mn7Z24XT2PTrW2wwfFSKYQa+bOybdGd5piCDLBjSbLoOlWQFTtJDQ4XyQe6fWQe0 Nj1B/byr973Fy7xPIgBvJdazJ5v1/LeqgHQ+KNiksdGEkQpaKsmIPXUb+DH2tCQe xTr33JYQPIqBe2QLyFiuf+nTBq/BIteZ4kgyGiXLPnsK/UxZjSNzAb1pBgrJE++c I+NLLRE9akg3z79v8a5bXqo= -----END CERTIFICATE----- </cert> <key> -----BEGIN ENCRYPTED PRIVATE KEY----- MIIFDjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIoNNAt6saujACAggA MBQGCCqGSIb3DQMHBAhSpLPJ+zbA3ASCBMgChOcGSgFit+53QatapVpDwsDLfPmb 0/C5m+kJcz3MuDktHpzM0oVezxYr5lZpFQ/cK13K8VTRtaM5Utpmc9+lFH6C7aL+ +eEUUUxVlj7/n55PWaA3vg7lOdsiGVNfTEeRt5ApoW4TW3iUetgB9pp3Ba3hgkgp TVggh2nG8TTVX4vdOvA7EzHz18YrH7++97T9ZDPRK6tBRnlJCs9u1lBYYnLXoNBu B4nm+63MQfAzHs5zkYCx2AB9XMAdRFTAcBWmmlUGBAuXSH6UC6SSqA1sw5cygzmB 9F7rFy4I5PirzY+XOkup9cM6tfVc9DZ5eb4wTmKdaFCG7tpX5vG3HIMRAOkgtyZR VoLD8CqfAB/8Z6BQlOFWxlwwAReCKZJaRjvIlwobjJMwN9kBqLTnPe7zQuMmH7pW cha6B4fs8v6ohuaEic0Q639dKp+w5NJpYyanxlLH9fpHO2P9tCBwmlpXs20Br7Ar /PXNhp8+7g/pmW3EHnuNeEA/1XUUeJohI/VU30WvN29u0c0TXRMMRqgdyz4O/f3s 9wCFlkn7tNo6GoW79Srn4BGfTnh67ThLHXp0eybmV10/f8bnEA0XOoS16h0Z7+aN bus+V958nMtLr6YP04YZZXXr/l/zcfznO4pojh7IC8myPl0vU8Svw6Cfg8UhnpsO N7w81IWuOi2sZ2GB9ch9n5W/KfvPWevKwskpTGz3xcgfx6KntA19KsjRjgxHatm+ DQnK6RUT8AsNdM/9mcC80iT8QkAPm/aG0gvkMshTPnWOYtwSMAnAl8q6u6y21wWJ C/zeqcv/Z2Du5mnvLXtl2gTTBQ6WAM99EmTB/rhFtpL9sxadLRBZstXFqT7BGOyc lTZy9PkzJbDGvuTZuCa5+cBwoThxu+vxaI66OzfkWbvLBpfhJlZPx3vL4446ocYE ZFQnveXFXFBaac5ftPDGFGCPHPlhUvI2xMUmjM69sZ5y91+f/Fy0drUzi16WMytX Fn0S/00xckMTNKzg80jXwBsoaRSAsLIOjem5HQSUw2Z49fvPgioj8ZYQN8JXnNzn RYat14+57BJCDW1vAFNZK99boazCQuO7h4A+OdZbWV/06i24W3OW44aCRJXuUMaa FnHZmx6ol3Yy6hTfH83HnhFisO3dTOlXkcLI5TI2f9qDHjdHNRZSmudA2hUIJLz5 aaEvZZ4HivDnqMDnLtxIwsJGww4zfgeq3nLMJm4L7LFZQNS5dy7QnWthg+3/QUSC 8JHD49etFeikPzQIDtX8c5vEJz6I25F9QIaccKPMOgO1oTLcq9gMcB3SY+kwsCc4 oQflFuOY119ez8mHf4PdoGl1QjrsuNcnay8Kv1dvR3v05ry23eW1MoOxZG38SGdj Be2YL/QNvQ0gI023OEWPTbaYkhAqFIuOQ94XdFLJ/hubFZB3pOyn58//qvINhq/A yIvWSjPqzDRfNGQlXjbktC6+OpVJZ/3eCkg9RmNg0iO9mEZdgP8ExlyLUAyUw71c H3vwCqvNwY9gcGBvUdCD1r61Dc24DQtFExvpsyL4oAsawkL3lY5cvtLxesBE1uA5 9L81gtQS6/QHpA7SXL4czlQOzNCbpfZqsAUyVcjnzaCDlVj02LwDKXNUVhVMIU5H +Ts= -----END ENCRYPTED PRIVATE KEY----- </key> key-direction 1 <tls-auth> # # 2048 bit OpenVPN static key # -----BEGIN OpenVPN Static key V1----- e052a868382a69fb8c363add31401924 5cc70270c08825a80a7e00abafcee448 3fbcf8bbce5422588323a5d67906f9f9 c1a66438802e1f3b51326bb12d615084 4c509ad761af2c025e02cc9cf8ad4ca8 a2e716fc544e9fecc5f01e22a152e7b6 a370d739f0601f6b239f2fac3e3b8139 c758dc7073669f60e7777d5c9718e8bc f3bb39e7f39c005aff0ddf9ea16dc634 b84a3213573a34efb626da35892bde24 a8e6c5980b8142abb01af132bad32ba5 6581a99db3b692b5c9432a32cf4fb4ee 0f1854187554e4e2d4d0ac5d894c610a 14056b67f63ecad2b296386796d31aba a7a9f0e548333a64c23a81c3dfb6b657 62dc6cfff761986ade803a1ba7dcf2c5 -----END OpenVPN Static key V1----- </tls-auth>
bbuckm Usually when you can't reach the Internet, it's because you've missed out some vitally important step in the set-up procedure.
bbuckm czarekplpl wrote I've checked everything few times and cannot find the conf problem. It is not always a conf problem. Other steps can be missed too (iptables, kernel).
