local 111.222.333.444
port 5000
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.11.0.0 255.255.0.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "ping 5"
push "ping-restart 30"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
suppress-timestamps
status openvpn-status.log
log-append log-append.log
log openvpn.log
verb 3
crl-verify crl.pem
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote vpn.someserver.domain.com 5000
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
comp-lzo
setenv opt block-outside-dns
key-direction 1
verb 3
ipconfig NAT
# iptables -t nat --list
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
SNAT all -- 10.8.0.0/24 !10.8.0.0/24 to: 111.222.333.444
server interfaces:
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 111.222.333.444 netmask 255.255.255.240 broadcast 111.222.333.223
eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 10.11.23.4 netmask 255.255.0.0 broadcast 10.11.255.255
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.0.1 netmask 255.255.255.0 destination 10.8.0.1
server public IP - 111.222.333.444 (vpn.someserver.domain.com) - changed from original IP/domain for safety reasons
local network IP - 10.11.0.0
I have connection established but i cant access 10.11.0.0 network (no ping, no access to sites or samba shares). This iptables rule looks weird to me (i didnt do setup) can it be the problem? Im not good with iptables and i would not want to disconnect already connected clients.
