OPENVPN client can't access machine on server side LAN

[kiteboarder]

Hi,

I have setup OPENVPN on Ubuntu Server 12.10 and the client on a windows Vista machine. OPENVP is using routing.

Working on one NIC card eth0
Server IP 192.168.0.100 LAN behind SERVER 192.168.0.0/24
VPN Server 10.8.0.1

Client IP 10.8.0.6

I can get the client to ping the Server IP and VPN Server IP
I can get the Machine with IP 192.168.0.7 to Ping the Client 10.8.0.6 by adding a STATIC route.

I can't ping from the client to the machine on the LAN with IP of 192.168.0.7.
I can't get the SERVER to Ping the client 10.8.0.6

Port Forwarding is enable and TUN interface has been allowed on the server.

I have read the HOW TOs and lots of posts.

I believe I have to set up some route to allow the two differnt networks to talk. like what did by adding a static route on the machin with IP 192.168.0.7. But I don't know how or what to put in.

Thanks

Craig

[kiteboarder]

I had rebooted the server, which rest IP_FORWARD to 0.

I now have a problem where I can ping some devices on the LAN, but I can't ping the PC with IP 192.168.0.7 and it is running windows 7.

I can ping the router on 192.168.0.1 and ping the device with IP 192.168.0.5
So I can get the the 192.168.0.0/24 network from my client, but not the PC I want access too.

Any ideas?

Thanks

[Douglas]

Windows 7 firewalls often filter/block ICMP. Have you ruled that out?

[kiteboarder]

Cheers Douglas.

That did the trick

[kiteboarder]

Ok, I can ping the PC. I can't access the Shared Drive. Any other firewalls that windows 7 that would stop this? Or any ideas?

I can map a drive to the Ubuntu Server/VPNServer that has been setup as Samba share. Not the windows7 PC

[Douglas]

Did you enable ICMP in the firewall or did you disable them?

[kiteboarder]

Hi Douglas,
I did the following in the firewall.

Control Panel --> System and security --> Windows Firewall --> Advanced settings --> Inbound rules --> New rule --> custom rule

in Protocol and ports: Protocol: ICMPv4
on the same panel go to customize, choose "Specific ICMP types", check the box "echo request"

[kiteboarder]

I managed to fix my problem. To access the shared floder I had to open TCP port 445 on the Windows 7 firewall.

All is working now.

Thanks for your help