Hi all, I have a setup where I am trying to achieve the following: [list=1] [*] VPN bridge where wlan0 is connected to my router and all traffic on eth0 gets routed via my OpenVPN client connection. [*] VPN server running on port 1194, all VPN traffic should directly connect to the internet via wlan0. [*] A few other servers that should be reachable via remotely (i.e. web server running on port 80, SSH server). [/list] The device is behind a router with port forwarding set up for the OpenVPN client (port 1194) and the web server (port 80). I am using route-up to set up my routing. My server route-up script: [code] #!/bin/bash ip route add default via 192.168.86.1 dev wlan0 table 200 ip rule add iif tun1 lookup 200 [/code] My client route-up script: [code] #!/bin/bash ip route add default via 10.8.0.1 dev tun0 table 100 ip rule add iif eth0 lookup 100 ip route del 0.0.0.0/1 via 10.8.0.1 dev tun0 [/code] When both server & client are started, my routing table looks the following: [code] Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default testwifi.here 0.0.0.0 UG 0 0 0 wlan0 10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.8.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 10.9.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun1 ec2-35-158-215- testwifi.here 255.255.255.255 UGH 0 0 0 wlan0 128.0.0.0 10.8.0.1 128.0.0.0 UG 0 0 0 tun0 192.168.86.0 0.0.0.0 255.255.255.0 U 0 0 0 wlan0 [/code] My iptables config: [code] -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i eth0 -o tun0 -j ACCEPT [/code] (1) always works fine (OpenVPN bridge). But (1) and (2) only works if I attempt to connect with a device on the same Wifi. When I am trying to connect to the web server, SSH server or to the OpenVPN server remotely, I get a "Connection timed out" error. From the local network, it works fine. Initially I thought that my port forwarding didn't work, but I realized that its probably due to my routing. Could anyone point me to the error in my configuration? I am relatively new to the routing part and was quite proud to get at least the bridge part working. :-)

To close the loop - adding the following two lines to the client ovpn config file helped: [code]route-nopull route 0.0.0.0 128.0.0.0[/code]

VPN bridge, VPN server & web server on the same device

matanza

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

matanza

To close the loop - adding the following two lines to the client ovpn config file helped:

route-nopull
route 0.0.0.0 128.0.0.0