The client is currently behind a NAT router in a lan and the server has a dedicated IP on the net. Client is running Uubntu 9.04 64bit and the Server is running Debian Etch 64bit.
Douglas already had a look at it but he couldn't say either why it isn't working.
I'll just post all the stuff here now:
Client config
Code: Select all
#
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote ks357331.kimsufi.com
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nogroup
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca ca.crt
cert rubi.crt
key rubi.key
ns-cert-type server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 3
mute 50Server config
Code: Select all
port 1194
proto udp
dev tun
ca ./easy-rsa2/keys/ca.crt
cert ./easy-rsa2/keys/server.crt
key ./easy-rsa2/keys/server.key # Diese Datei geheim halten.
dh ./easy-rsa2/keys/dh1024.pem # Diffie-Hellman-Parameter
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
ping-timer-rem
keepalive 20 180
comp-lzo
user openvpn
group openvpn
persist-key
persist-tun
status openvpn-status.log
verb 3
mute 50
Code: Select all
ks357331:/etc/openvpn# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ks357331:/etc/openvpn# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
SNAT all -- 10.8.0.0/24 anywhere to:91.121.147.34
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ks357331:/etc/openvpn#
Code: Select all
# Generated by iptables-save v1.4.2 on Sun Aug 16 20:02:02 2009
*nat
:PREROUTING ACCEPT [881:65548]
:POSTROUTING ACCEPT [2044:137443]
:OUTPUT ACCEPT [2044:137443]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 91.121.147.34
COMMIT
# Completed on Sun Aug 16 20:02:02 2009
# Generated by iptables-save v1.4.2 on Sun Aug 16 20:02:02 2009
*filter
:INPUT ACCEPT [38332:2141342]
:FORWARD ACCEPT [22:1848]
:OUTPUT ACCEPT [91670:123922847]
COMMIT
# Completed on Sun Aug 16 20:02:02 2009Code: Select all
ks357331:/etc/openvpn# cat /proc/sys/net/ipv4/ip_forward
1
Code: Select all
ks357331:/etc/openvpn# cat openvpn-status.log
OpenVPN CLIENT LIST
Updated,Sun Aug 16 19:46:27 2009
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
rubi,84.227.140.82:49753,62417,105629,Sun Aug 16 19:25:49 2009
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.6,rubi,84.227.140.82:49753,Sun Aug 16 19:40:31 2009
GLOBAL STATS
Max bcast/mcast queue length,0
END
ks357331:/eserver /var/log/messages
if anyone has an idea why it's not working, please let me know.ks357331:/etc/openvpn# cat /var/log/messages
Aug 16 06:25:05 ks357331 kernel: imklog 3.18.6, log source = /proc/kmsg started.
Aug 16 06:25:05 ks357331 rsyslogd: [origin software="rsyslogd" swVersion="3.18.6" x-pid="2086" x-info="http://www.rsyslog.com"] restart
Aug 16 15:43:47 ks357331 kernel: [6536061.061305] tun: Universal TUN/TAP device driver, 1.6
Aug 16 15:43:47 ks357331 kernel: [6536061.061340] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Aug 16 15:43:47 ks357331 kernel: [6536061.062483] tun0: Disabled Privacy Extensions
Aug 16 16:09:30 ks357331 squid[1369]: Squid Parent: child process 1371 started
Aug 16 16:12:59 ks357331 squid[1369]: Squid Parent: child process 1371 exited with status 0
Aug 16 16:13:01 ks357331 squid[1508]: Squid Parent: child process 1510 started
Aug 16 16:15:04 ks357331 squid[1508]: Squid Parent: child process 1510 exited with status 0
Aug 16 16:15:06 ks357331 squid[1627]: Squid Parent: child process 1629 started
Aug 16 16:24:00 ks357331 squid[1627]: Squid Parent: child process 1629 exited with status 0
Aug 16 16:24:02 ks357331 squid[1950]: Squid Parent: child process 1952 started
Aug 16 16:24:18 ks357331 squid[1950]: Squid Parent: child process 1952 exited with status 0
Aug 16 16:24:20 ks357331 squid[1969]: Squid Parent: child process 1971 started
Aug 16 16:45:19 ks357331 kernel: [6539753.253519] ip_tables: (C) 2000-2006 Netfilter Core Team
Aug 16 17:00:13 ks357331 kernel: [6540647.139602] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
Aug 16 18:55:46 ks357331 kernel: [6547580.505455] tun0: Disabled Privacy Extensions
Aug 16 19:14:34 ks357331 kernel: [6548707.702286] tun0: Disabled Privacy Extensions
Aug 16 19:18:26 ks357331 kernel: [6548940.033975] tun0: Disabled Privacy Extensions
Aug 16 19:18:44 ks357331 kernel: [6548958.432463] tun0: Disabled Privacy Extensions
ks357331:/etc/openvpn#