(Solved)Cannot reach LAN behind server

sojkovec

Greetings,

after two weeks of googling and reading bunch of advice I'm stuck. There seems to be no answer to my problem. I am on verge of just giving up and use RDP session in RDP session. My setup is simple: 192.168.2.0/24 LAN with 192.168.2.1 GW and OpenDNS server running on 192.168.2.38. Everything else is default (the 8.0.0.0/24 subnet). Connection to server no problem. Routing pushed to client successfully (client routing table checked->ok). There comes my problem: Wireshark is running on a machine on the LAN, intercetping ICMP packets. I ping that machine and expecting ICMP echo request arrive (i'm aware the respond will not come back, since it will end up in the GW, will fix with static route). Nothing arrives. Nothing weird in logs. Simply, it seems packets from client reach the OpenVPN server, but are discarded. What am I missing? Must be something stupid (or routing is just broken on W10, that would be no surprise on this parody of OS). OS is Win10 64bit.

Note: there IS a weird behavior of the server: ping on server from client will arrive, but again no response back to client (checked with Wireshark). Strangely, the web server running on the server can be reached by client just fine (on its 10.8.0.1 address, but not its LAN address).

Thank you

TinCanTech

sojkovec wrote Note: there IS a weird behavior of the server: ping on server from client will arrive, but again no response back to client (checked with Wireshark).

Firewall

sojkovec wrote Strangely, the web server running on the server can be reached by client just fine (on its 10.8.0.1 address, but not its LAN address).

Probably IP_Routing

sojkovec

Please close this. There is a switch:

HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\IPEnableRouter. Well, stupid. Just set it to 1. All working now.

Thank you anyway.

TinCanTech

We all forget that one .. from time to time 8-)

sojkovec

Just thinking, would not be nice if a windows installer would check and optionally set this during installation, with prompt of course, something like this: "Warning: IP routing on your OS is disabled. For server to function properly IP routing MUST be enabled. Do you want to enable it now? (reboot required). This is not necessary for client functionality." Number of new posts here would shrink probably.

TinCanTech

If you submit a patch it will get reviewed ..