HI,
I've a configuration of OpenVPN that allows client to be connected to the VPN but neither the Internet connection works nor the client can ping other device in the remote LAN.
In the following the server configuration.
port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.1.254"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem
The following the client's conf:
2020-02-21 16:49:41.734319 /sbin/ifconfig utun6 10.8.0.2 10.8.0.2 netmask 255.255.255.0 mtu 1500 up
2020-02-21 16:49:41.737315 /sbin/route add -net 10.8.0.0 10.8.0.2 255.255.255.0
add net 10.8.0.0: gateway 10.8.0.2
2020-02-21 16:49:41.742153 /sbin/route add -net SERVER_IP 146.48.96.1 255.255.255.255
add net SERVER_IP: gateway 146.48.96.1
2020-02-21 16:49:41.744121 /sbin/route add -net 0.0.0.0 10.8.0.1 128.0.0.0
add net 0.0.0.0: gateway 10.8.0.1
2020-02-21 16:49:41.745933 /sbin/route add -net 128.0.0.0 10.8.0.1 128.0.0.0
add net 128.0.0.0: gateway 10.8.0.1
2020-02-21 16:49:41.747990 MANAGEMENT: >STATE:1582300181,ADD_ROUTES,,,,,,
2020-02-21 16:49:41.748032 /sbin/route add -net 192.168.1.0 10.8.0.1 255.255.255.0
add net 192.168.1.0: gateway 10.8.0.1
16:49:41 *Tunnelblick: **********************************************
16:49:41 *Tunnelblick: Start of output from client.up.tunnelblick.sh
16:49:44 *Tunnelblick: Retrieved from OpenVPN: name server(s) [ 192.168.1.254 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
16:49:44 *Tunnelblick: Will allow changes to manually-set ServerAddresses '8.8.8.8'
16:49:44 *Tunnelblick: Setting search domains to 'openvpn' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
16:49:46 *Tunnelblick: Saved the DNS and SMB configurations so they can be restored
16:49:46 *Tunnelblick: Changed DNS ServerAddresses setting from '8.8.8.8' to '192.168.1.254'
16:49:46 *Tunnelblick: Changed DNS SearchDomains setting from '' to 'openvpn'
16:49:46 *Tunnelblick: Changed DNS DomainName setting from HIDED' to 'openvpn'
16:49:46 *Tunnelblick: Did not change SMB NetBIOSName setting of ''
16:49:46 *Tunnelblick: Did not change SMB Workgroup setting of ''
16:49:46 *Tunnelblick: Did not change SMB WINSAddresses setting of ''
16:49:46 *Tunnelblick: DNS servers '192.168.1.254' will be used for DNS queries when the VPN is active
16:49:46 *Tunnelblick: NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
16:49:46 *Tunnelblick: Flushed the DNS cache via dscacheutil
16:49:46 *Tunnelblick: /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
16:49:46 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
16:49:46 *Tunnelblick: Not notifying mDNSResponderHelper that the DNS cache was flushed because it is not running
16:49:46 *Tunnelblick: Setting up to monitor system configuration with process-network-changes
16:49:46 *Tunnelblick: End of output from client.up.tunnelblick.sh
16:49:46 *Tunnelblick: **********************************************
2020-02-21 16:49:46.362928 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2020-02-21 16:49:46.362994 Initialization Sequence Completed
2020-02-21 16:49:46.363058 MANAGEMENT: >STATE:1582300186,CONNECTED,SUCCESS,10.8.0.2,2.236.134.77,1194,,
2020-02-21 16:49:46.579657 *Tunnelblick: DNS address 172.20.10.1 is being routed through the VPN
2020-02-21 16:49:46.686798 *Tunnelblick: DNS address 192.168.1.254 is being routed through the VPN
The client Tunnelblick version Tunnelblick 3.8.1 (build 5400) on Mac os CAtanalina.
Please help... thanks
