Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been installed OpenVPN server on my CentOs VPS, and it started successfully

And try to configure iptables for it by following command:

iptables -A FORWARD -m state -–state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s -j SNAT --to

But I can't connect to it,so I run nmap on my computer:

nmap -p 1194

Starting Nmap 5.21 ( ) at 2011-12-27 22:28 IRST
Nmap scan report for (
Host is up (0.53s latency).
1194/tcp closed unknown

Nmap done: 1 IP address (1 host up) scanned in 3.22 seconds

Now where is the problem and how should I solve it? Why 1194 is closed after install OpenVPN?

I have followed to install and configure it.

share|improve this question
up vote 4 down vote accepted

Just to note, your nmap scan was against TCP/1194. By default, OpenVPN will use UDP/1194, so your scan, as specified, isn't looking at the right place.

In any case, make sure openvpn is running (ps auxw |grep openvpn) and the netstat command that Khaled posted. If you have default DENY on iptables, you will need to open up UDP/1194 also.

share|improve this answer

First, you need to make sure the service is running and listening on the expected port. You can use:

$ netstat -lnp

Second, it is not clear whether you are running iptables on the same server or on another one. Make sure you enable IP forwarding if iptables is configured on another machine. If these rules are applied on the same VPN server, you need to add the accept rules to 'INPUT' chain.

share|improve this answer

Don't you need to have the port open in the RH-Firewall-1-INPUT or INPUT chains ?

iptables -I RH-Firewall-1-INPUT -p udp -m udp --dport 1194 -j ACCEPT


iptables -I INPUT -p udp -m udp --dport 1194 -j ACCEPT
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.