I configured the server and in the client I used the default vpn manager in ubuntu to connect to the server. The connection is established correctly, but the client is not able to go to the internet. Firefox doesn't open any Web page. Would you please help me for the server configuration so clients will be able to use Web Traffic as well? The server has a fix IP address. Below you have the content of the configuration file. [quote] local 173.98.88.213 port 1194 proto udp ;dev tap dev tun0 ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1 bypass-dhcp" push "route 173.98.88.0 255.255.255.0" keepalive 10 120 comp-lzo user nobody group nogroup persist-key persist-tun status openvpn-status.log verb 3 [/quote] Regards

Remove [quote]push "route 173.98.88.0 255.255.255.0"[/quote] from the config. You use redirect-gateway option that does that. Also you don't need "bypass-dhcp" to redirect internet trafic thru tunnel. Also you can add a new google dns: [code]push "dhcp-option DNS 8.8.8.8"[/code]

Dear Mimilko, Thank you for your reply. I appreciate it. I removed that line and as well as bypass option. I also added [code]push "dhcp-option DNS 8.8.8.8"[/code] but I've still the same problem. Best Regards

I would like to see the log of OpenVPN client, and the routing table of the client. Try "tracert 8.8.8.8" from client and see where it goes.

Here is the log on the client. [quote] Sep 25 17:46:53 laptop NetworkManager[928]: Starting VPN service 'openvpn'... Sep 25 17:46:53 laptop NetworkManager[928]: VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 7175 Sep 25 17:46:53 laptop NetworkManager[928]: VPN service 'openvpn' appeared; activating connections Sep 25 17:46:53 laptop NetworkManager[928]: VPN plugin state changed: 1 Sep 25 17:46:53 laptop nm-openvpn[7178]: OpenVPN 2.2.0 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jul 4 2011 Sep 25 17:46:53 laptop nm-openvpn[7178]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Sep 25 17:46:53 laptop nm-openvpn[7178]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Sep 25 17:46:53 laptop NetworkManager[928]: VPN plugin state changed: 3 Sep 25 17:46:53 laptop NetworkManager[928]: VPN connection 'VPS_VPN' (Connect) reply received. Sep 25 17:46:53 laptop nm-openvpn[7178]: UDPv4 link local: [undef] Sep 25 17:46:53 laptop nm-openvpn[7178]: UDPv4 link remote: [AF_INET]173.245.73.213:1194 Sep 25 17:46:56 laptop nm-openvpn[7178]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542' Sep 25 17:46:56 laptop nm-openvpn[7178]: WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo' Sep 25 17:46:56 laptop nm-openvpn[7178]: [server] Peer Connection Initiated with [AF_INET]173.245.73.213:1194 Sep 25 17:46:59 laptop nm-openvpn[7178]: TUN/TAP device tun0 opened Sep 25 17:46:59 laptop nm-openvpn[7178]: /usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper tun0 1500 1541 10.8.0.6 10.8.0.5 init Sep 25 17:46:59 laptop NetworkManager[928]: SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/tun0, iface: tun0) Sep 25 17:46:59 laptop NetworkManager[928]: SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/tun0, iface: tun0): no ifupdown configuration found. Sep 25 17:46:59 laptop NetworkManager[928]: VPN connection 'VPS_VPN' (IP Config Get) reply received. Sep 25 17:46:59 laptop NetworkManager[928]: VPN Gateway: 173.245.73.213 Sep 25 17:46:59 laptop NetworkManager[928]: Internal Gateway: 10.8.0.5 Sep 25 17:46:59 laptop NetworkManager[928]: Tunnel Device: tun0 Sep 25 17:46:59 laptop NetworkManager[928]: Internal IP4 Address: 10.8.0.6 Sep 25 17:46:59 laptop NetworkManager[928]: Internal IP4 Prefix: 32 Sep 25 17:46:59 laptop NetworkManager[928]: Internal IP4 Point-to-Point Address: 10.8.0.5 Sep 25 17:46:59 laptop NetworkManager[928]: Maximum Segment Size (MSS): 0 Sep 25 17:46:59 laptop NetworkManager[928]: Static Route: 10.8.0.1/32 Next Hop: 10.8.0.1 Sep 25 17:46:59 laptop NetworkManager[928]: Forbid Default Route: no Sep 25 17:46:59 laptop NetworkManager[928]: Internal IP4 DNS: 8.8.8.8 Sep 25 17:46:59 laptop NetworkManager[928]: DNS Domain: '(none)' Sep 25 17:46:59 laptop nm-openvpn[7178]: Initialization Sequence Completed Sep 25 17:47:00 laptop NetworkManager[928]: VPN connection 'VPS_VPN' (IP Config Get) complete. Sep 25 17:47:00 laptop NetworkManager[928]: Policy set 'VPS_VPN' (tun0) as default for IPv4 routing and DNS. Sep 25 17:47:00 laptop NetworkManager[928]: VPN plugin state changed: 4 Sep 25 17:47:00 laptop dbus[837]: [system] Activating service name='org.freedesktop.nm_dispatcher' (using servicehelper) Sep 25 17:47:00 laptop dbus[837]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' Sep 25 17:47:09 laptop nm-openvpn[7178]: write to TUN/TAP : Invalid argument (code=22) Sep 25 17:47:34 nm-openvpn[7178]: last message repeated 2 times Sep 25 17:47:34 laptop ntpdate[7225]: no server suitable for synchronization found Sep 25 17:47:39 laptop nm-openvpn[7178]: write to TUN/TAP : Invalid argument (code=22) Sep 25 17:48:11 nm-openvpn[7178]: last message repeated 3 times Sep 25 17:48:11 laptop avahi-daemon[926]: Withdrawing workstation service for tun0. Sep 25 17:48:11 laptop NetworkManager[928]: nm_system_iface_flush_routes: assertion `iface != NULL' failed Sep 25 17:48:11 laptop NetworkManager[928]: sync_addresses: assertion `iface != NULL' failed Sep 25 17:48:12 laptop NetworkManager[928]: Policy set 'Auto hfy-35527' (wlan0) as default for IPv4 routing and DNS. Sep 25 17:48:12 laptop NetworkManager[928]: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/tun0, iface: tun0) Sep 25 17:48:12 laptop dbus[837]: [system] Activating service name='org.freedesktop.nm_dispatcher' (using servicehelper) Sep 25 17:48:12 laptop dbus[837]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' Sep 25 17:48:12 laptop nm-openvpn[7178]: SIGTERM[hard,] received, process exiting Sep 25 17:48:17 laptop NetworkManager[928]: VPN service 'openvpn' disappeared [/quote] And here is traceroute 8.8.8.8: [quote]home@laptop:/var/log$ traceroute 8.8.8.8 traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets 1 * * * 2 * * * 3 * * * 4 * * * 5 * * * 6 * * * 7 * * * 8 * * * 9 * * * 10 * * * 11 * * * 12 * * * 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * [/quote] Thanks

You didnt show routing table on client on OpenVPN is connected. Did you configure the system where OpenVPN server is installed to forward packets from tunnel to internet?

xx.xx.xx.com is actually the name server's domain. Below you have the routing table while connected to VPN. [quote] Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 10.8.0.5 0.0.0.0 UG 0 0 0 tun0 10.8.0.1 10.8.0.5 255.255.255.255 UGH 0 0 0 tun0 10.8.0.5 * 255.255.255.255 UH 0 0 0 tun0 link-local * 255.255.0.0 U 1000 0 0 wlan0 xx.xx.xx.com 192.168.1.1 255.255.255.255 UGH 0 0 0 wlan0 192.168.1.0 * 255.255.255.0 U 0 0 0 wlan0 [/quote] Except openvpn configuration file, I don't know how I should configure the server so that packets are forwarded from tunnel to the internet. How should I do that?

Hello Again, Sorry I was figuring out how to install iptables. Finally I install it manually. Anyways, I copied the command from the link you provided (openvpn documentation) as follows: [quote]iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE[/quote] It didnt work so I tried this Then this [quote]iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o [b]tun0[/b] -j MASQUERADE[/quote] And finally this: [quote]iptables -t nat -A POSTROUTING -s 10.8.0.0/[b]32[/b] -o tun0 -j MASQUERADE[/quote] I'm still not able to reach the internet while connected. Sorry for my stupid question, I don't know well iptables. Here is the result of ifconfig command: [code]eth0 Link encap:Ethernet HWaddr aa:00:00:f5:49:d5 inet addr:173.245.73.213 Bcast:173.245.73.255 Mask:255.255.255.0 inet6 addr: fe80::a800:ff:fef5:49d5/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7931390 errors:0 dropped:0 overruns:0 frame:0 TX packets:148490 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1311239485 (1.3 GB) TX bytes:38493630 (38.4 MB) Interrupt:11 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:987 errors:0 dropped:0 overruns:0 frame:0 TX packets:987 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:79928 (79.9 KB) TX bytes:79928 (79.9 KB) tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) [/code] Regards

[quote]Sep 25 17:46:56 laptop nm-openvpn[7178]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542' Sep 25 17:46:56 laptop nm-openvpn[7178]: WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo' [/quote] Resolve this issue. "link-mtu" and "comp-lzo" must be same on server and client.

I solved those issues you mentioned. By I don't know why it's not able to connect to VPN server. VPN connection fails. In the client I've [code]read UDPv4 [ECONNREFUSED]: Connection refused (code=111)[/code] [code]Oct 8 13:59:26 laptop NetworkManager[580]: Starting VPN service 'openvpn'... Oct 8 13:59:26 laptop NetworkManager[580]: VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 26282 Oct 8 13:59:26 laptop NetworkManager[580]: VPN service 'openvpn' appeared; activating connections Oct 8 13:59:26 laptop NetworkManager[580]: VPN plugin state changed: 1 Oct 8 13:59:27 laptop NetworkManager[580]: VPN plugin state changed: 3 Oct 8 13:59:27 laptop NetworkManager[580]: VPN connection 'VPS_VPN' (Connect) reply received. Oct 8 13:59:27 laptop nm-openvpn[26285]: OpenVPN 2.2.0 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jul 4 2011 Oct 8 13:59:27 laptop nm-openvpn[26285]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Oct 8 13:59:27 laptop nm-openvpn[26285]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Oct 8 13:59:27 laptop nm-openvpn[26285]: LZO compression initialized Oct 8 13:59:27 laptop nm-openvpn[26285]: UDPv4 link local: [undef][/code] Oct 8 13:59:27 laptop nm-openvpn[26285]: UDPv4 link remote: [AF_INET]173.245.73.213:1194 Oct 8 13:59:27 laptop nm-openvpn[26285]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111) Oct 8 14:00:07 nm-openvpn[26285]: last message repeated 4 times Oct 8 14:00:07 laptop NetworkManager[580]: VPN connection 'VPS_VPN' (IP Config Get) timeout exceeded. Oct 8 14:00:07 laptop nm-openvpn[26285]: SIGTERM[hard,] received, process exiting Oct 8 14:00:07 laptop NetworkManager[580]: Policy set 'Auto hfy-35527' (wlan0) as default for IPv4 routing and DNS. Oct 8 14:00:12 laptop NetworkManager[580]: VPN service 'openvpn' disappeared

no internet on a VPN client connection established

Mimiko

Read this http://www.openvpn.net/index.php/open-source/documentation/howto.html#redirect to configure internet access. Also enable forwarding on server.

jsmithvps

Well I enabled IP forwarding. for the link you provided, I enter the following command:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o tun0 -j MASQUERADE

Is it ok to put tun0, instead of eth0?

The server is as follows:

Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
10.8.0.2        0.0.0.0         255.255.255.255 UH        0 0          0 tun0
10.8.0.0        10.8.0.2        255.255.255.0   UG        0 0          0 tun0
173.258.27.0    0.0.0.0         255.255.255.0   U         0 0          0 eth0
0.0.0.0         173.258.27.0    0.0.0.0         UG        0 0          0 eth0

Mimiko

No, its not ok to use tun0. Please read carefully the manual.

jsmithvps

Dear Mimiko I'd like to thank you for your kind help. It was very helpful. Is there a way I can give you favour back?

Mimiko

jsmithvps, take a poor kitty and rise it with love. 😛

« Previous Page