Windows 2019 OpenVPN Server. Client will have internet then lose it.

Vysse

Unsure what is happening exactly. I am setting up a vpn to block my real ip from the world while running my server from home. I bought a VPS and installed OpenVPN on it and got everything setup and was able to browse the internet for a time with the IP showing as the VPS one. Then randomly the internet would effectively die. I would still be connected to the VPN and the VPS's internet is working. When I go to the VPS Ethernet Adapter and untick the "Allow other network users to connect through this computer's Internet connection" and then press OK and then tick it back on and press okay it works for a minute or two again. I asked my VPS provider about this and they assure me it is not hardware related. Afaik the right ports are open. I am providing my config files as well.

dev-node "TAP"
mode server
port 4455

proto tcp4-server
dev tun

tls-server
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ta.key" 0

push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ServerVPN.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ServerVPN.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh2048.pem"

server 10.10.10.0 255.255.255.0

client-to-client
keepalive 10 120
cipher AES-128-CBC

persist-key
persist-tun

client-config-dir "C:\\Program Files\\OpenVPN\\config"

verb 3

route-delay 5
route-method exe

push "route 192.168.0.0 255.255.255.0"
route 192.168.182.0 255.255.255.0

client
port 4455

proto tcp4-client
dev tun

tls-client
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
remote-cert-tls server

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\ClientVPN.crt"
key "C:\\Program Files\\OpenVPN\\config\\ClientVPN.key"

cipher AES-128-CBC

persist-key
persist-tun

verb 3
mute 20

Vysse

Removed these 3 items:
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"

which fixed my issue. Now I am still having troubles accessing my webserver and game server through the VPN. Is there some way to make the connection work for both of these?

TinCanTech

Vysse wrote Removed these 3 items:
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"

That is a quite damning indictment against Google .. not that I am surprised :mrgreen: Google is evil.

While this change may have solved your apparent issue, you are probably leaking DNS everywhere now.

Have you thought about using a less hostile DNS provider ?

Vysse wrote Now I am still having troubles accessing my webserver and game server through the VPN. Is there some way to make the connection work for both of these?

There is no Magic button to fix things .. you have to understand, in detail, what network requirements you have.

Vysse

TinCanTech wrote
Vysse wrote Removed these 3 items:
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"
That is a quite damning indictment against Google .. not that I am surprised :mrgreen: Google is evil.

While this change may have solved your apparent issue, you are probably leaking DNS everywhere now.

Have you thought about using a less hostile DNS provider ?

Vysse wrote Now I am still having troubles accessing my webserver and game server through the VPN. Is there some way to make the connection work for both of these?
There is no Magic button to fix things .. you have to understand, in detail, what network requirements you have.

I do not expect there to be a magic fix button but would like to be educated on potential solutions. How can I forward the traffic through certain ports or even all ports to my home hosted server. I really just wanted to VPN to hide my IP and maybe some DDOS protection. It would also help with me accessing my game server without having to use it's local ip due to NAT Loopback.