Using openVPN to bypass bloking firewall

[alexander07]

Hello Guys

Situation:

--ws----------{ Internet }----<-router->----------S1----S2-----------

- Workstation ws is connected somewhere on the Internet
- Both servers S1 and S2 are connected to the same public IP subnet pubip.
- The openVPN server S1 has a public IP address pubip1
- The application server S2 has a public IP address pubip2 an listens on TCP port 8245.
- The router interconnect the Internet and public subnet pubip. The router blocks all traffic from the Internet (from workstation ws) to the S2 socket pubip2:8245.

Question:
Can openVPN server be configured so that ws can establish VPN tunnel and than communicate w/ S2 on soket pubip2:8245?

[maikcat]

hi there,


does your router (server side) performs NAT?

Michael.

[alexander07]

hi there,


does your router (server side) performs NAT?

Michael.

No the router does not do any NAT-ing. The router in essence works as a firewall blocking unwanted traffic from the Internet to public subnet on which the servers S1 and S2 are connected.

[maikcat]

hi there,

due to the fact that your router doesnt performs any type of nat
and your servers have public ip addresses it will be a little tricky to accomplish what you want.

some thoughts..

you CAN use some type of portforwarding on your server,
to explain the above
if you use only one port of lets say server A,you can create your openvpn server
on server B ,connect on server B , and redirect port x from your server B to server A.
so the client will connect only to server B ,but with all traffic being encrypted through openvpn..

i dont know if your servers OS can support the above.

hope didnt confuse you

Michael.