Configuration Question related to WAN address?

[RichTJ99]

Hi,

I am using DDWRT as my Open VPN server & I am trying to push all traffic from the connected VPN client through the VPN server (mostly because I am concerned about security). I will be changing the IP schemes once I get this working 100%

Everything currently works, ping, SMB, RDP, etc. I am just a little concerned that some traffic is through the VPN, internet traffic seems to be via the local host. I would love to test the security on it. I am not sure how to do that.

Server Config:

Code: Select all

mode server
proto udp
port 1194
dev tap0
server-bridge 192.168.1.2 255.255.255.0 192.168.1.230 192.168.1.249
keepalive 10 120
daemon
verb 5
client-to-client
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001

The client connects but as I said the clients WAN Ip, is not the same as the SOHO WAN IP.

Code: Select all

remote rich28.DDns.org 1194
client
dev tap0
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
float
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
push "redirect-gateway def1"
push "route-gateway 192.168.1.1"
verb 5

Any help would be great.

Thanks,
Rich

[janjust]

with the configs you posted your client will be assigned an address from the (private) range 192.168.1.230- ....
how traffic is forwarded from your VPN server out on the internet is a routing issue that should be configured on the VPN server itself.
what happens if your client machine goes to http://www.whatsmyip.com