VPN Connection problem

n3lThon

Hi,

I'm creating a VPN, and I have a problem with the connection. Everything looks good but when i'm playing games the connection goes down.

I have configurated all rules for iptables. My network:

ISP Router -> Server -> Local Network

The server has 2 interfaces and its working like a router, so when I'm at the local network everything work perfectly, but trough the vpn I lost the connection only at the game, but everything continuous working.

Mimiko

Some configs and logs are needed.

n3lThon

The ping command works fine, max. 5ms to server (local ip).
The configuration files:

Server:

proto udp
port 33333
dev tap0
tls-server
comp-lzo
keepalive 10 120
persist-key
persist-tun
float
max-clients 2
server-bridge 192.168.2.1 255.255.255.0 192.168.2.10 192.168.2.50
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
ifconfig-pool-persist /etc/openvpn/ipp.txt
log /root/openvpn.log
status /root/openvpn_status.log

tls-auth /etc/openvpn/keys/secret.key
dh /etc/openvpn/keys/dh2048.pem
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key

Client:

remote <ip>
proto udp
port 33333
dev tap
dev-type tap
tls-client
comp-lzo
keepalive 10 120
persist-key
persist-tun
float
remote-cert-tls server
pull

tls-auth ./keys/tls.key
dh ./keys/dh2048.pem
ca ./keys/ca.crt
cert ./keys/pc.crt
key ./keys/pc.key

IPTABLES (INPUT-> DROP, FORWARD-> DROP, OUTPUT-> ACCEPT)

iptables -A INPUT -i br0 -j ACCEPT
iptables -A INPUT -i tap0 -j ACCEPT
iptables -A FORWARD -i tap0 -j ACCEPT

Server-> Linux
Client-> Windows

Thanks 🙂

Mimiko

iptables -A FORWARD -i tap0 -j ACCEPT

Must be an output interface to it: -o eth0, for example.
Try using "proto tcp" and see if is not disconnectng.
Whont the game work under an routed configuration VPN?

n3lThon

Mimiko wrote
iptables -A FORWARD -i tap0 -j ACCEPT
Must be an output interface to it: -o eth0, for example.
Try using "proto tcp" and see if is not disconnectng.
Whont the game work under an routed configuration VPN?

I just starting thinking about it today, and I will try. Before I did the bridge I didn't know that I can make full reachable both networks using iptables. Probably I don't need broadcast traffic, so that it's not a problem and for fixed network service I will use iptables to redirect 10.0.0.0 address to 192.168.2.0 and still using the same IP for Windows sharing.

Thanks 🙂

n3lThon

I still have the problem. It started working fine, but then I have the same problem.
Some errors:

Mon Nov 7 10:11:25 2011 us=4817 pc1/<ip>:46535 Need IPv6 code in mroute_extract_addr_from_packet

Mon Nov 7 10:08:05 2011 us=921200 read UDPv4 [EMSGSIZE Path-MTU=1492]: Message
too long (code=90)

Mimiko

For IPv6 error, just unbind this protocol from the adapter.
The other message may be erradical.