OpenVPN not working with port forwarding

stampedeboss@gmail.com

I am having difficulties getting my OpenVPN server working without placing the server in the DMZ. I have port forwarding on 1194 active but the clients will not connect until I place the server into the DMZ setting of my router.

Once in the DMZ, everything works properly. It appears that there are other ports that need to be opened other than 1194. Any help would be appreciated.

Config:
port 1194
proto udp
dev tap0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/castle.crt
key /etc/openvpn/castle.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.9.110 255.255.255.0 192.168.9.20 192.168.9.30
client-to-client
keepalive 10 120
tls-auth /etc/openvpn/ta.key 0 # This file is secret
comp-lzo
max-clients 4
user nobody
group nobody
persist-key
persist-tun
status /var/log/openvpn-status.log
log /var/log/openvpn.log
verb 4
mute 20

All clients are linux clients using samba and NFS shares

janjust

for debugging try switching to the TCP protocol:

proto tcp

and place the VPN server outside the DMZ; if that works then it's an UDP forwarding rule: not only inbound traffic needs to be permited, but also outbound. Some routers don't handle that very well.