wp.rauchholz
Problem statement: Openvpn client cannot surf the web.
Setup:
I run on a CENTOS 7 home server that acts also as modem/router and as such has an internal/exteral network
Dynamic IP updated by ddclient. openvpn 2.4.6
Description
The client can connect to the openvpn servers and obtians also an IP. But there is no connection to internet.
I set verbose to 6, but there is no error message in the log file I can find.
Thank you in advance for your help. Wolfgang
Config firewall:
iptables -t nat -A POSTROUTING -o $EXT_DEV -s $VPN_NET -j MASQUERADE (ext EXT_DEV = ppp0, VPN_net=
iptables -A INPUT -p udp --dport 1194 -j ACCEPT
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT
IP forwarding set: net.ipv4.ip_forward = 1
port 1194
proto udp
dev tun
ca /etc/openvpn/ssl/ca.crt
cert /etc/openvpn/ssl/LHS.crt
key /etc/openvpn/ssl/LHS.key
dh /etc/openvpn/ssl/dh.pem
server $VPN_NET 255.255.255.0
ifconfig-pool-persist server-ipp.txt 0
push "route <LAN NET> 255.255.255.0"
push "redirect-gateway def1"
push "dhcp-option DNS <LAN IP>1"
client-to-client
keepalive 10 120
tls-auth /etc/openvpn/ssl/ta.key 0
auth SHA512
cipher AES-256-CBC
comp-lzo adaptive
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
verb 3
explicit-exit-notify 1
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
crl-verify /etc/openvpn/ssl/crl.pem
client
dev tun
proto udp
port 1194
remote www.*****.com 1194 udp
remote-cert-tls server
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
cipher AES-256-CBC
auth SHA512
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
