[resolved] win7 tracert goesthrough tunnel other traffic

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Locked
tooke412
OpenVpn Newbie
Posts: 2
Joined: Thu Aug 04, 2011 1:49 pm

[resolved] win7 tracert goesthrough tunnel other traffic

Post by tooke412 » Thu Aug 04, 2011 1:59 pm

*update- same config works on other win7 pc. This one is a bootcamped mac. Not sure if that is the problem, but will research further.

I have installed latest version of client on win7 with the same config that works on my mac. I have added the tap interface and a few other lines people suggested, but the only traffic going through the tunnel is a ping. Traceroutes to external IP addresses correctly go through the tunnel, but I cant get any other traffic. I can ping an internal webserver, but can't pull up the web page, or any other Internet sites. I have uninstalled and reinstalled the tap0 device and turned off the firewalls in windows. I don't actually see the tap0 device in the firewall settings, but I turned off all available firewalls.
I have been trying to change the tap0 device's location in Windows network settings to say 'home', but the closest I could get, by changing the local security policy, is to 'work'. I also change the local wireless lan to 'work', but still no luck.
Here are my client and server configs, as well as the end of my client log file.
Thanks for any suggestions you may have.

Code: Select all

client
dev tap
dev-node LAN3
proto udp
remote xxx.xxx.xxx.xxx 1200
resolv-retry infinite
nobind
register-dns
route-method exe
route-delay 5 20
persist-key
persist-tun
ca ca.crt
cert myclient.crt
key myclient.key
cipher BF-CBC
comp-lzo
verb 3

Code: Select all


server.conf
mode server
tls-server
local 192.168.3.50
port 1200
proto udp

dev tap0
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"

persist-key
persist-tun

ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
tls-auth ta.key 0

cipher BF-CBC
comp-lzo

ifconfig-pool-persist ipp.txt
server-bridge 192.168.3.50 255.255.255.0 192.168.3.65 192.168.3.80
push "dhcp-option DNS 192.168.3.1"
push "redirect-gateway def1"
max-clients 10

user nobody
group nogroup
keepalive 10 120
verb 3

Code: Select all



 [server] Peer Connection Initiated with xxx.xxx.xxx.xxx 1200
 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.3.1,dhcp-option DOMAIN yourdomain.com,redirect-gateway def1,route-gateway 192.168.3.50,ping 10,ping-restart 120,ifconfig 192.168.3.65 255.255.255.0'
 OPTIONS IMPORT: timers and/or timeouts modified
 OPTIONS IMPORT: --ifconfig/up options modified
 OPTIONS IMPORT: route options modified
 OPTIONS IMPORT: route-related options modified
 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
 ROUTE default_gateway=192.168.15.1
 TAP-WIN32 device [LAN3] opened: \\.\Global\{24600EC6-8792-444B-B72A-7985DB5C0575}.tap
 TAP-Win32 Driver Version 9.8 
 TAP-Win32 MTU=1500
 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.3.65/255.255.255.0 on interface {24600EC6-8792-444B-B72A-7985DB5C0575} [DHCP-serv: 192.168.3.0, lease-time: 31536000]
 Successful ARP Flush on interface [22] {24600EC6-8792-444B-B72A-7985DB5C0575}
 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
 C:\WINDOWS\system32\route.exe ADD 68.195.184.122 MASK 255.255.255.255 192.168.15.1
 OK!
 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.3.50
 OK!
 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.3.50
 OK!
 Initialization Sequence Completed
 Start net commands...
 C:\WINDOWS\system32\net.exe stop dnscache
The DNS Client service is stopping...
The DNS Client service could not be stopped.
 C:\WINDOWS\system32\net.exe start dnscache
The requested service has already been started.
More help is available by typing NET HELPMSG 2182.
 ERROR: Windows ipconfig command failed: returned error code 2
 C:\WINDOWS\system32\ipconfig.exe /flushdns
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
 C:\WINDOWS\system32\ipconfig.exe /registerdns
Windows IP Configuration
Registration of the DNS resource records for all adapters of this computer has been initiated. Any errors will be reported in the Event Viewer in 15 minutes.
 End net commands...

User avatar
Mimiko
Forum Team
Posts: 1564
Joined: Wed Sep 22, 2010 3:18 am

Re: win7 tracert goesthrough tunnel other traffic blked-neve

Post by Mimiko » Thu Aug 04, 2011 8:21 pm

Hello.

You will have to check routing and firewall configuration on server. It seems that the linux box with OpenVPN server allows only icmp request for your new client's IP.

tooke412
OpenVpn Newbie
Posts: 2
Joined: Thu Aug 04, 2011 1:49 pm

Re: win7 tracert goesthrough tunnel other traffic blked-solv

Post by tooke412 » Sat Aug 06, 2011 12:45 pm

I solved my problem. I tried this install on several win7 boxes with varying results, until I realized it was Internet Explorer that had the problem. Every time I tried pulling up IE I would get the ...unable to connect..diagnose network connection error, even after I gave each client its own certificate.
Once I tried firefox, it went right through. I'll have to try to diagnose the IE issue later.
Thanks

Locked