Openvpn on a xen vm

[ncharles]

I'm seeing an odd problem. I've got openvpn set up on a NATed xen vm running gentoo. The external ip is forwarded to the vm0. I can connect to the openvpn, however I can't seem to reach any ip addresses not on the box.

nathan@xxxx:~$ ping -c 1 192.168.1.240
PING 192.168.1.240 (192.168.1.240) 56(84) bytes of data.
64 bytes from 192.168.1.240: icmp_req=1 ttl=64 time=291 ms

--- 192.168.1.240 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 291.583/291.583/291.583/0.000 ms
nathan@xxxx:~$ ping -c 1 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.

Heres a tcpdump of the outgoing interface showing an unsuccessful ping from an openvpn client and a successful one from the box itself.

vm0 ~ # tcpdump -n -i eth0 -XX 'proto \icmp'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
17:37:25.428351 IP 192.168.1.240 > 8.8.8.8: ICMP echo request, id 3655, seq 1, length 64
0x0000: 0030 48cf 8b42 0016 3e4c b4ac 0800 4500 .0H..B..>L....E.
0x0010: 0054 0000 4000 3f01 6901 c0a8 01f0 0808 .T..@.?.i.......
0x0020: 0808 0800 1229 0e47 0001 1a29 ff4c d115 .....).G...).L..
0x0030: 0200 0809 0a0b 0c0d 0e0f 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f &'()*+,-./
17:38:37.292129 IP 192.168.1.240 > 8.8.8.8: ICMP echo request, id 5963, seq 1, length 64
0x0000: 0030 48cf 8b42 0016 3e4c b4ac 0800 4500 .0H..B..>L....E.
0x0010: 0054 0000 4000 4001 6801 c0a8 01f0 0808 .T..@.@.h.......
0x0020: 0808 0800 be50 174b 0001 6dce f64c 0000 .....P.K..m..L..
0x0030: 0000 fb74 0400 0000 0000 1011 1213 1415 ...t............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f &'()*+,-./
17:38:37.311042 IP 8.8.8.8 > 192.168.1.240: ICMP echo reply, id 5963, seq 1, length 64
0x0000: 0016 3e4c b4ac 0030 48cf 8b42 0800 4500 ..>L...0H..B..E.
0x0010: 0054 5949 0000 3501 59b8 0808 0808 c0a8 .TYI..5.Y.......
0x0020: 01f0 0000 c650 174b 0001 6dce f64c 0000 .....P.K..m..L..
0x0030: 0000 fb74 0400 0000 0000 1011 1213 1415 ...t............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f &'()*+,-./

[gladiatr72]

Hello,

A little more information is needed here.

Post your server and client configs for a start and we can go from there.

Regards,
Stephen