Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have recently noticed a strange behavior with OpenVPN client.

Say I do a mtr vpn_server_ip BEFORE connecting the VPN client. Everything is fine, the route is displayed as expected.

Once connected I have the VPN client connected with the proper routes and gateway set up for everything to go by the VPN, save of course vpn_server_ip. but then I get nothing from the mtr, first hop responds (my home router) but all subsequent hops fail.

I dont see any difference in route -n that would explain this change...

It is a minor problem really, doesn't affect (afaik) the working of the vpn but it is puzzling.

share|improve this question
up vote 0 down vote accepted

Are you using the tun device or the tap device? tun is routed but tap is bridged, which could affect whether you can access the server IP or not. If it's a bridged connection then maybe you can't access the server IP.

However this really looks like a firewall issue and your openvpn server firewall is blocking icmp traffic. That would explain why mtr and ping both don't work as they both use icmp.

Check with the admin of the openvpn server and see what they have fora a firewall config. Also you could try running nmap against the host to see what ports are blocked. You should probably only do that with the permission and understanding of the openvpn server admin though, as that could cause a lot of log messages and warnings on the remote side.

share|improve this answer
I am the server admin and I have no reason to believe that ICMP is blocked. I use tun. – zanfr Mar 21 '11 at 20:09
oh ok, so check your iptables on the server with 'iptables -nvL' and see if you have rules explicitly allowing the proper sorts of icmp queries. I suspect you are blocking them by default. – Phil Hollenback Mar 21 '11 at 20:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.