Hello, I am having issues with setting up my OpenVPN on Debian VPS. It actually did work few months ago and then I did not use it at all. I wanted to start using it again yesterday, but my client will not connect to the server. The VPS also runs webserver on port 80, ssh and ftp - all these work. My client fails at getting to UDP 1194 on my server. I am using the Openvpn app for iOS. Both iOS and the app are current version. my server.conf: [code] mode server port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key dh dh2048.pem server 10.8.0.0 255.255.255.0 push "redirect-gateway autolocal" push "dhcp-option DNS 217.31.204.130" push "dhcp-option DNS 193.29.206.206" tls-server tls-auth ta.key 0 ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo persist-key persist-tun user nobody group users status openvpn-status.log verb 4 route-metric 1000 [/code] my client.ovpn [code] client dev tun proto udp remote MY SERVERS IP 1194 resolv-retry infinite nobind mute-replay-warnings comp-lzo verb 3 keepalive 10 120 persist-key persist-tun xxx xxx xxx xxx [/code] also: [code]:~$ netstat -ltnup (No info could be read for "-p": geteuid()=1000 but you should be root.) Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:44558 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:8888 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN - tcp6 0 0 :::143 :::* LISTEN - tcp6 0 0 :::111 :::* LISTEN - tcp6 0 0 :::80 :::* LISTEN - tcp6 0 0 :::21 :::* LISTEN - tcp6 0 0 :::44405 :::* LISTEN - tcp6 0 0 :::22 :::* LISTEN - tcp6 0 0 :::993 :::* LISTEN - udp 0 0 0.0.0.0:111 0.0.0.0:* - udp 0 0 0.0.0.0:1194 0.0.0.0:* - udp 0 0 0.0.0.0:689 0.0.0.0:* - udp 0 0 127.0.0.1:699 0.0.0.0:* - udp 0 0 0.0.0.0:45058 0.0.0.0:* - udp 0 0 0.0.0.0:10000 0.0.0.0:* - udp6 0 0 :::47979 :::* - udp6 0 0 :::111 :::* - udp6 0 0 :::689 :::* - [/code] I did not find any openvpn related log in /var/log. The only one I have found is /etc/openvpn/openvpn-status.log, which gets updated every ten seconds and should probably list all connected clients. It only shows an empty table. I will post my clients log from the device in few minutes. What should I check for in order to make my VPN work again? Thanks!

[quote=filip.cizek post_id=82631 time=1543394356 user_id=45759] I did not find any openvpn related log [/quote]you don't have a log file specified .. see --log in the manual.

OpenVPN on my VPS - no response from client

filip.cizek

Hello,

I am having issues with setting up my OpenVPN on Debian VPS. It actually did work few months ago and then I did not use it at all. I wanted to start using it again yesterday, but my client will not connect to the server. The VPS also runs webserver on port 80, ssh and ftp - all these work. My client fails at getting to UDP 1194 on my server.

I am using the Openvpn app for iOS. Both iOS and the app are current version.

my server.conf:

mode server
port 1194
proto udp
dev tun

ca ca.crt
cert server.crt
key server.key
dh dh2048.pem

server 10.8.0.0 255.255.255.0

push "redirect-gateway autolocal"
push "dhcp-option DNS 217.31.204.130"
push "dhcp-option DNS 193.29.206.206"

tls-server
tls-auth ta.key 0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
user nobody
group users
status openvpn-status.log
verb 4
route-metric 1000

my client.ovpn

client
dev tun
proto udp
remote MY SERVERS IP 1194 
resolv-retry infinite
nobind
mute-replay-warnings
comp-lzo
verb 3
keepalive 10 120
persist-key
persist-tun
<key>
xxx
</key>
<cert>
xxx
</cert>
<ca>
xxx
</ca>
<tls-auth>
xxx
</tls-auth>

also:

:~$ netstat -ltnup
(No info could be read for "-p": geteuid()=1000 but you should be root.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:44558           0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:8888            0.0.0.0:*               LISTEN      -               
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN      -               
tcp6       0      0 :::143                  :::*                    LISTEN      -               
tcp6       0      0 :::111                  :::*                    LISTEN      -               
tcp6       0      0 :::80                   :::*                    LISTEN      -               
tcp6       0      0 :::21                   :::*                    LISTEN      -               
tcp6       0      0 :::44405                :::*                    LISTEN      -               
tcp6       0      0 :::22                   :::*                    LISTEN      -               
tcp6       0      0 :::993                  :::*                    LISTEN      -               
udp        0      0 0.0.0.0:111             0.0.0.0:*                           -               
udp        0      0 0.0.0.0:1194            0.0.0.0:*                           -               
udp        0      0 0.0.0.0:689             0.0.0.0:*                           -               
udp        0      0 127.0.0.1:699           0.0.0.0:*                           -               
udp        0      0 0.0.0.0:45058           0.0.0.0:*                           -               
udp        0      0 0.0.0.0:10000           0.0.0.0:*                           -               
udp6       0      0 :::47979                :::*                                -               
udp6       0      0 :::111                  :::*                                -               
udp6       0      0 :::689                  :::*                                -

I did not find any openvpn related log in /var/log. The only one I have found is /etc/openvpn/openvpn-status.log, which gets updated every ten seconds and should probably list all connected clients. It only shows an empty table.

I will post my clients log from the device in few minutes.

What should I check for in order to make my VPN work again? Thanks!

TinCanTech

filip.cizek wrote I did not find any openvpn related log

you don't have a log file specified .. see --log in the manual.

filip.cizek

Hello,

so I finally had a look into it but I still do not understand why my devices have no internet. They do see each other, though.

I guess there is something wrong with my forwarding settings, or maybe firewall. Could someone help, please?

My final intention is to have camera-equipped Raspberry Pis connected to my VPN, so I can see what happens around my home and garage without having to use Weaved. Right now all I am able to do is connect my iOS devices and Windows computer, but that is another story 🙂

Here is my fresh log: http://www.vohrada.cz/f/openvpn.log

TinCanTech

This

push "redirect-gateway autolocal"

should probably be:

push "redirect-gateway def1 autolocal"

filip.cizek wrote I still do not understand why my devices have no internet. They do see each other, though

Probably need the NAT rule in your firewall:
https://community.openvpn.net/openvpn/wiki/HOWTO#Routingallclienttrafficincludingweb-trafficthroughtheVPN

filip.cizek

Thanks, TinCanTech! I have set the push-redirect as you have suggested and replaced my current secondary opendns dhcp-option line with my VPN server IP 10.8.0.1. Right now I am here on my iPad located in London connected to a VPN running on my VPS located in Prague. according to the whatismyip site, my IP is the one of my VPS 🙂

So now I am going to set up my RPis running cameras at home in Czech to connect to the same VPN so I can spy on neighbours more easily :mrgreen: :twisted:

Thanks again!