Can't ping client but client can't ping server

[fdavid67]

Hi,

First I will apologize for my english.

I install openvpn on an Ubuntu server, and I install the client on Windows 8.

I can't ping from the client to the serveur at 10.8.0.1, but when from the serveur the ping 10.8.0.6 doesnt work.

I look since 2 days every forum, but i can't find the answers.

Please, can someone help me ?

Here's the server config :

Code: Select all

port 1194
proto udp
dev tun
ca ca.crt
cert server.cert
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp -lzo
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 3

The client config :

Code: Select all

client

dev tun

proto udp

remote 192.168.1.16 1194

resolv-retry infinite

nobind

persist-key

persist-tun

mute-replay-warnings

ca ca.crt

cert client1.crt

key client1.key

comp-lzo

verb 3

route-method exe 

route-delay 2 

And the iptables :

Code: Select all

Chain INPUT (policy ACCEPT 341 packets, 25100 bytes)
 pkts bytes target     prot opt in     out     source               destination 
   79  6495 ACCEPT     udp  --  any    any     anywhere             anywhere             udp dpt:openvpn

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 
    0     0 ACCEPT     all  --  tun0   p4p1    anywhere             anywhere    
    0     0 ACCEPT     all  --  p4p1   tun0    anywhere             anywhere    
    0     0 ACCEPT     all  --  any    any     10.8.0.0/24          anywhere    

Chain OUTPUT (policy ACCEPT 272 packets, 38706 bytes)
 pkts bytes target     prot opt in     out     source               destination 

I need the VPN server only to acces on the files, not to use it for internet.
I need to connect the smb repertories from all my client.

[maikcat]

hi there,

I can't ping from the client to the serveur at 10.8.0.1, but when from the serveur the ping 10.8.0.6 doesnt work.

so..your ping is not working BOTH ways , right?

can you post your client log also?

and remove this from your client:

Code: Select all

route-method exe 

Michael.