Cannot connect to the internet

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
teytey
OpenVpn Newbie
Posts: 2
Joined: Mon Jun 17, 2013 5:14 pm

Cannot connect to the internet

Post by teytey » Mon Sep 30, 2013 11:45 am

Hello,

currently I try to follow this tutorial http://bit.ly/14XnGIL . The problem is that i cannot connect to the internet the connection to the VPN server works perfect (I can ping the private tunnel IP address of the server). This are my settings:

server.conf

Code: Select all

local PUBLICIP
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
route PUBLICSUBNET 255.255.255.192
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Code: Select all

netstat -nr
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
10.8.0.2        0.0.0.0         255.255.255.255 UH        0 0          0 tun0
NETWORKIP       0.0.0.0         255.255.255.252 U         0 0          0 eth0
PUBLICSUBNET    10.8.0.2        255.255.255.192 UG        0 0          0 tun0
10.8.0.0        10.8.0.2        255.255.255.0   UG        0 0          0 tun0
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 eth0
0.0.0.0         GATEWAYIP       0.0.0.0         UG        0 0          0 eth0

Code: Select all

iptables -L -t nat -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  10.8.0.0/24          0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination



iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
/etc/openvpn/ccd/client

Code: Select all

iroute PUBLICSUBNET 255.255.255.192

Code: Select all

sysctl.conf
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296

Post Reply