satonio
Hi, i have a server and two clients, and the problem is the clients cannot communicate with each other. with ping 192.168.5.1 it works (it's the server and it's not the LAN ip it is or whatever i'm using that range because i know noone was using it before here.).
The server can connect without problems to both nodes.
Both nodes can communicate with the server
The nodes cannot communicate
satonio-server: 192.168.5.1
satonio-laptop: 192.168.5.2
servidor-debian: 192.168.5.3
I have another server conf on the same machine but i know it's using the correct one because the ip is correct
satonio@satonio-laptop:/etc/openvpn$ ping 192.168.5.3
PING 192.168.5.3 (192.168.5.3) 56(84) bytes of data.
From 192.168.5.1 icmp_seq=1 Destination Port Unreachable
From 192.168.5.1 icmp_seq=2 Destination Port Unreachable
From 192.168.5.1 icmp_seq=3 Destination Port Unreachable
From 192.168.5.1 icmp_seq=4 Destination Port Unreachable
administrador@servidor-debian:~$ ping 192.168.5.2
PING 192.168.5.2 (192.168.5.2) 56(84) bytes of data.
From 192.168.5.1 icmp_seq=1 Destination Port Unreachable
From 192.168.5.1 icmp_seq=2 Destination Port Unreachable
From 192.168.5.1 icmp_seq=3 Destination Port Unreachable
administrador@servidor-debian:~$ ping 192.168.5.1
PING 192.168.5.1 (192.168.5.1) 56(84) bytes of data.
64 bytes from 192.168.5.1: icmp_req=1 ttl=64 time=78.0 ms
64 bytes from 192.168.5.1: icmp_req=2 ttl=64 time=78.0 ms
64 bytes from 192.168.5.1: icmp_req=3 ttl=64 time=77.3 ms
64 bytes from 192.168.5.1: icmp_req=4 ttl=64 time=78.2 ms
satonio@satonio-laptop:/etc/openvpn$ ping 192.168.5.1
PING 192.168.5.1 (192.168.5.1) 56(84) bytes of data.
64 bytes from 192.168.5.1: icmp_seq=1 ttl=64 time=78.1 ms
64 bytes from 192.168.5.1: icmp_seq=2 ttl=64 time=77.9 ms
64 bytes from 192.168.5.1: icmp_seq=3 ttl=64 time=78.1 ms
64 bytes from 192.168.5.1: icmp_seq=4 ttl=64 time=78.4 ms
satonio@satonio-server:/etc/openvpn$ ping 192.168.5.2
PING 192.168.5.2 (192.168.5.2) 56(84) bytes of data.
64 bytes from 192.168.5.2: icmp_seq=1 ttl=64 time=78.0 ms
64 bytes from 192.168.5.2: icmp_seq=2 ttl=64 time=77.9 ms
64 bytes from 192.168.5.2: icmp_seq=3 ttl=64 time=78.4 ms
64 bytes from 192.168.5.2: icmp_seq=4 ttl=64 time=78.9 ms
satonio@satonio-server:/etc/openvpn$ ping 192.168.5.3
PING 192.168.5.3 (192.168.5.3) 56(84) bytes of data.
64 bytes from 192.168.5.3: icmp_seq=1 ttl=64 time=77.7 ms
64 bytes from 192.168.5.3: icmp_seq=2 ttl=64 time=77.6 ms
64 bytes from 192.168.5.3: icmp_seq=3 ttl=64 time=77.6 ms
64 bytes from 192.168.5.3: icmp_seq=4 ttl=64 time=77.4 ms
64 bytes from 192.168.5.3: icmp_seq=5 ttl=64 time=77.7 ms
and that iptables are the reason:
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
can someone tell me how to do it? i don't want that iptables that have sense for another vpn to interfere with the new one. how can i do it? thanks
