Ok, I'm really desesperate I need to release an openvpn deploy to get rid of a dying server. On the subject:
I installed OpenVPN with a routed interface (tun0) into a server with a public IP + 3 private IP networks. I pushed successfully the routes into the clients, authenticated all right, added on the server the iptables rules to do SNAT to the internal networks. And everything seems ok, Except for one thing: The client that generates a TCP request is unable to accept the response from remote servers (on any linux/windows client happens).
Let me dump the info:
[openvnc client addr: 10.10.10.6] [openvpn server addr: 10.10.10.253]
[REMOTE-HOST: network: 192.168.0.0/24, 172.16.0.0/24, openvpn-network:10.10.10.0/24]
No Source Destination Protocol Lenght hw_src_addr hw_dst_addr src_port dst_port 1 10.10.10.6 192.168.0.68 TCP 60 N/A N/A 57211 22 2 192.168.0.68 10.10.10.6 TCP 60 N/A N/A 22 57211 3 10.10.10.6 192.168.0.68 TCP 52 N/A N/A 57211 22 4 192.168.0.68 10.10.10.6 SSH 73 N/A N/A 22 57211 5 10.10.10.6 192.168.0.68 ICMP 101 N/A N/A 22 57211 6 192.168.0.68 10.10.10.6 SSH 73 N/A N/A 22 57211
- client sends the SYN from a dynamic port (57211) to a remote well known port (22)
- server responds SYN+ACK from the well known port 22 client responds ACK establishing the 3 way handshake
- server starts ssh protocol information from port 22 as the connection is in ESTABLISHED state client sends a icmp telling the server that the port is unreacheable ( like the server tried to start the connection )
Anyone could get me some pointers please?