How 2 connect a Mailserver over VPN to the public 'net?

RandyK

I have a OpenVPN 2.1.4 routed setup connecting a remote server on a static ip with my home LAN on a dynamic ip.

The remove server is setup as the OpenVPN server.

Everything's working client <> server. I can ping in both directions, to and from endpoints and machines on my LAN subnet.

I setup a mail-server on my home LAN that "listens" only @ a private ip:25 on my LAN subnet.

I want to connect that mail-server's in&out-bound traffic over the VPN link to the internet-facing interface with a public IP on the remote server.

How do I do that? Is that routing OUTSIDE of OpenVPN just at the kernel level? Or do I configure that in OpenVPN?

Randy

maikcat

hi there,

it would help up if you posted your configs..
what MTA you use?
can you post the part of its config reffering to network..?

cheers,

michael.

janjust

hi Randy,

this depends a little on your setup, but most likely you have a client/server setup (i.e. server config has 'server xx.yy' in it.
In that case you want to do client-side routing to the server-side. This is covered a little in the OpenVPN HOWTO part "expanding the scope":
http://openvpn.net/index.php/open-source/documentation/howto.html#scope

what you'd want to do is set up a client config file (aka CCD file on the server) to tell openvpn that the your home LAN can be found "behind" your opevnpn client.

As an alternative, if your openvpn client is running linux/bsd then you could use some smart iptables/pf portforwarding rule to forward ONLY traffic from and to <home-lan-mail-server>:<port>

RandyK

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

janjust

yes, in theory it's the same with a VPN connection in place : if the VPN connection is functioning properly it simply becomes a matter of routing and NATting.

Great to hear that you've bought my book - thanks!