Hi,
I installed openvpn on a centos server, and openvpn gui on my local windows computer. It connect with no errors but then the traffic is not routed, on my browser I still see my local IP on whatismyip.com . Could you help me locate the problem ?
He is my config files
local client1.ovpn
client
dev tun
dev-node MyTap
proto udp
remote __ip__ 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3
remote server.conf
port 443
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.8.0.1"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
remote rc.local
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to __ip__
touch /var/lock/subsys/local
openvpn gui output
Sat Feb 04 14:23:29 2012 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Sat Feb 04 14:23:29 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sat Feb 04 14:23:29 2012 LZO compression initialized
Sat Feb 04 14:23:29 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Feb 04 14:23:29 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Feb 04 14:23:29 2012 Local Options hash (VER=V4): '41690919'
Sat Feb 04 14:23:29 2012 Expected Remote Options hash (VER=V4): '530fdded'
Sat Feb 04 14:23:29 2012 UDPv4 link local: [undef]
Sat Feb 04 14:23:29 2012 UDPv4 link remote: __ip__:443
Sat Feb 04 14:23:29 2012 TLS: Initial packet from __ip__:443, sid=db09b4b6 a309d437
Sat Feb 04 14:23:30 2012 VERIFY OK: depth=1, /C=ni/ST=zd/L=inbtferd/O=hugfrdseseefrft/CN=hugfrdseseefrft_CA/emailAddress=zuft@jibhzftse.th
Sat Feb 04 14:23:30 2012 VERIFY OK: nsCertType=SERVER
Sat Feb 04 14:23:30 2012 VERIFY OK: depth=0, /C=ni/ST=zd/L=inbtferd/O=hugfrdseseefrft/CN=server/emailAddress=zuft@jibhzftse.th
Sat Feb 04 14:23:31 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 04 14:23:31 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 04 14:23:31 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 04 14:23:31 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 04 14:23:31 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Feb 04 14:23:31 2012 [server] Peer Connection Initiated with __ip__:443
Sat Feb 04 14:23:32 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat Feb 04 14:23:32 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sat Feb 04 14:23:32 2012 Options error: unknown --redirect-gateway flag: bypass-dhcp
Sat Feb 04 14:23:32 2012 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: topology (2.0.9)
Sat Feb 04 14:23:32 2012 OPTIONS IMPORT: timers and/or timeouts modified
Sat Feb 04 14:23:32 2012 OPTIONS IMPORT: --ifconfig/up options modified
Sat Feb 04 14:23:32 2012 OPTIONS IMPORT: route options modified
Sat Feb 04 14:23:32 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Feb 04 14:23:32 2012 TAP-WIN32 device [MyTap] opened: \\.\Global\{7E1A61B2-E1CC-41CE-9A41-2C38734D952A}.tap
Sat Feb 04 14:23:32 2012 TAP-Win32 Driver Version 8.4
Sat Feb 04 14:23:32 2012 TAP-Win32 MTU=1500
Sat Feb 04 14:23:32 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {7E1A61B2-E1CC-41CE-9A41-2C38734D952A} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat Feb 04 14:23:32 2012 Successful ARP Flush on interface [393219] {7E1A61B2-E1CC-41CE-9A41-2C38734D952A}
Sat Feb 04 14:23:32 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat Feb 04 14:23:32 2012 Route: Waiting for TUN/TAP interface to come up...
Sat Feb 04 14:23:33 2012 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Sat Feb 04 14:23:33 2012 route ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sat Feb 04 14:23:33 2012 Route addition via IPAPI succeeded
Sat Feb 04 14:23:33 2012 Initialization Sequence Completed
thanks in advance
