I wanted to use my last post to ask my next question on it but it has been closed before I couldn't write...Maikat is a very efficient guy!
The thing is that I have my VPN working right now so I can SSH my local ressources but I can't do several things:
1) Can't reach local ressources over the browser
2) Can't access to the internet
3) Can't connect on samba to my local devices.
I suppose it's a config thing but I don't really know what to change..... Could you help me?
My server configuration
root@raspberrypi:/var/log# cat /etc/openvpn/server.conf
local 192.168.1.12O # adresse IP locale de votre serveur
dev tun # type de VPN, tun (tunnel IP) ou tap (tunnel Ethernet/bridge)
proto udp # protocole à utiliser : tcp ou udp, généralement udp
port 8080 # le port par défaut pour OpenVPN, à ajuster au besoin
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/raspi.crt # à ajuster à votre serveur
key /etc/openvpn/easy-rsa/keys/raspi.key # idem
dh /etc/openvpn/easy-rsa/keys/dh1024.pem # si vous êtes restés sur du 1024 bits, changez ici
server 10.8.0.0 255.255.255.0 #le réseau au sein duquel vous allez attribuer des IP
ifconfig 10.8.0.1 10.8.0.2 # serveur et point de sortie distant
push "redirect-gateway def1"
push "route 10.8.0.1 255.255.255.255" # route vers le serveur VPN
push "route 10.8.0.0 255.255.255.0" # route vers le sous-réseau VPN
push "route 192.168.1.120 255.255.255.0" #sous-réseau local - adaptez l'adresse IP locale de votre serveur
push "dhcp-option DNS 192.168.1.254" # votre serveur DNS primaire (votre routeur, souvent)
# vous pouvez aussi utiliser le DNS Google 8.8.8.8 ou OpenDNS 208.67.222.222
# pour le reste, a priori pas de raisons d'y toucher à moins de savoir ce que vous faites !
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1
Client configuration
Quote:
root@raspberrypi:/var/log# cat /etc/openvpn/easy-rsa/keys/Default.txt
client
dev tun
proto udp
remote my_domaine.no-ip.org 8080
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1
mute 20
root@raspberrypi:/var/log#
My samba configuration on the server which is on the network (working when connected on LAN):
#======================= Global Settings =======================
[global]
workgroup = WORKGROUP
server string = %h server
dns proxy = no
log level = 0
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
syslog only = yes
panic action = /usr/share/samba/panic-action %d
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = yes
unix password sync = no
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
pam password change = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY
guest account = nobody
load printers = no
disable spoolss = yes
printing = bsd
printcap name = /dev/null
unix extensions = yes
wide links = no
create mask = 0777
directory mask = 0777
use sendfile = yes
aio read size = 16384
aio write size = 16384
null passwords = no
local master = yes
time server = no
wins support = no
#======================= Share Definitions =======================
[Data]
read list =
write list = "siulman",@"siulman"
store dos attributes = no
force directory mode = 0775
guest ok = no
hide dot files = yes
ea support = no
inherit acls = yes
writable = yes
inherit permissions = no
printable = no
invalid users =
path = /media/97f93447-ec94-467a-821c-9745c9a46684//
force create mode = 0775
valid users = "siulman",@"siulman"
create mode = 0755
directory mode = 0755
...with webdav (without VPN) seems the same... strange...
