Server dropping traffic if src IP address is not VPN Client
Posted: Fri Sep 10, 2021 3:32 pm
We have a client/server setup. The client is a Linux NAT box which uses a iptable nat DNAT rule to change the destination IP address to the private IP (tun) address of the OpenVPN server (from the public IP address of the OpenVPN client).
If we do NOT change the source IP address of the packet (leave it an external IP address) it gets to the eth0 interface of the OpenVPN server, but does not get to the tun0 interface.
Any ideas what is happening?
SOLUTION - OpenVPN is dropping it because it doesn't have a path back to the source.
If we do NOT change the source IP address of the packet (leave it an external IP address) it gets to the eth0 interface of the OpenVPN server, but does not get to the tun0 interface.
Any ideas what is happening?
SOLUTION - OpenVPN is dropping it because it doesn't have a path back to the source.