Page 1 of 1

Client connects, but cant access internet but can ping serve

Posted: Wed Dec 11, 2013 7:41 am
by gamemaste789
just some info that might help

iptables -L -v

Code: Select all

Chain INPUT (policy ACCEPT 1280 packets, 169K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy ACCEPT 23 packets, 1470 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 1066 packets, 107K bytes)
 pkts bytes target     prot opt in     out     source               destination
iptables -L -t nat -v

Code: Select all

Chain PREROUTING (policy ACCEPT 27 packets, 1658 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 219 packets, 14550 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 197 packets, 13140 bytes)
 pkts bytes target     prot opt in     out     source               destination
server.conf

Code: Select all

local ###.###.###.###
port 1194
proto udp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so  /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status server-tcp.log
verb 3
client.conf

Code: Select all

client
dev tun
proto udp
remote ###.###.###.### 1194 #- your OPENVPN server ip and port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass pass.txt
comp-lzo
verb 3
redirect-gateway
i have tun/tap on i know for sure since

cat /dev/net/tun
returns : file descriptor in bad state

I believe its bc my iptables dont save even tho i do iptable-save


INFO:
VPS
centos 5 32bit
client:
win 7 ( I run ever under admin)

My client connects I receive IP, i can ping the server, the server can ping client. Server can ping google.com but client cant ping google.com

Re: Client connects, but cant access internet but can ping s

Posted: Wed Dec 11, 2013 8:14 am
by gamemaste789
I have went ahead and asked them to set my iptable for this

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to x.x.x.x

x's being my public IP

Re: Client connects, but cant access internet but can ping s

Posted: Wed Dec 11, 2013 8:41 am
by gamemaste789
GOT IT WORKING, just needed them to set iptable..