Preamble: i'm studing TCP routing, i'm only newbie about that.
I have a Linux (Debian) server with OpenVPN (2.1_rc11, from standard repo).
I don't want client-to-client communications, but server need to talk with clients for forwarding ports.
If i connect with client like Windows (7 64bit) or Mac-OSX (Lion with TunnelBrick),
if i ping from the server, the client, it works.
Server-side:
ping 10.4.0.6
Tcpdump client-side:
tcpdump -i tun0 -C 100 -W 1000 -n -nn -q
<date> IP 123.123.123.123 > 10.4.0.6: ICMP echo request, id 2679, seq 1, length 64
<date> IP 10.4.0.6 > 123.123.123.123: ICMP echo reply, id 2679, seq 1, length 64
But, under Linux (OpenVPN 2.2.0, tested with freshly installed Ubuntu), i don't have the reply packet, and the ping goes to timeout:
tcpdump -i tun0 -C 100 -W 1000 -n -nn -q
<date> IP 123.123.123.123 > 10.4.0.6: ICMP echo request, id 2679, seq 1, length 64
I'm trying to understand why, but a direction about this issue will be appreciated. Thanks.
OpenVPN Server config:
local 123.123.123.123
port 443
proto udp
ifconfig-pool-persist /home/myvpn/temp/udp_443/ipp.txt
status /dev/null
log /dev/null
dev tun
ca /home/myvpn/config/ca.crt
dh /home/myvpn/config/dh2048.pem
cert /home/myvpn/server/server.crt
key /home/myvpn/server/server.key
cipher AES-256-CBC
server 10.4.0.0 255.255.0.0
client-config-dir /home/myvpn/ccd
push "redirect-gateway def1"
push "dhcp-option DNS 10.4.0.1"
keepalive 10 120
comp-lzo no
push "comp-lzo no"
persist-key
persist-tun
verb 3
management localhost 7004
tmp-dir /dev/shm
script-security 2
mode server
client-connect /home/vpn/connect.sh
client-disconnect /home/vpn/disconnect.sh
fast-io
mlock
persist-local-ip
persist-remote-ip
OpenVPN Client config:
client
dev tun
proto udp
remote 123.123.123.123 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca "ca.crt"
cert "user.crt"
key "user.key"
ns-cert-type server
cipher AES-256-CBC
comp-lzo
verb 3
explicit-exit-notify 5
