1
vote
0answers
14 views

Policy routing local user's traffic down a tunnel

I've got a Linux based Firewall/Router running iptables and SNAT for traffic passing through it to the Internet via a single uplink - This is working fine. There is also a small number of applications ...
0
votes
1answer
38 views

OpenVPN with no internet access

I am using OpenVPN and am able to connect, but with no internet access anymore. Here is my ip table: sshadmin@mdpi1:/etc/openvpn/easy-rsa/keys$ netstat -nr Kernel IP routing table Destination ...
-1
votes
1answer
40 views

OpenVPN, How to filtering client

I have a problem with limiting "client" with my VPN server. I was reading the FAQ about using iptables with disable option client-to-client, but i cannot run it. The question is how correctly allow ...
0
votes
0answers
30 views

VPN routed traffic, response goes outside of VPN?

Here's a weird one. Whenever I'm on a hotel network I tend to like to route all my traffic through my home network. Mainly since I'm not entirely sure all my passwords go through SSL all the time. ...
0
votes
0answers
126 views

iptables forward port range through OpenVPN

I have a VPN server (the "host" - 10.8.1.1) on a public VPS instance running OpenVPN. The second instance I am running (the "client" - 10.8.1.2) is a local ESXi instance connected to the host vpn ...
0
votes
0answers
35 views

OpenVPN in bridged mode, confusion about interfaces

I'm trying to understand some fundamental OpenVPN/networking basics. Let's assume the following scenario: there is an openVPN server which is already configured properly it runs in bridged mode the ...
2
votes
0answers
43 views

Understanding an OpenVPN bridge from iptable's point of view

In my scenario, there is a machine which acts as both an iptables-based firewall and an OpenVPN-server at the same time. It has two network interfaces - eth1 is connected to the internet whereas eth0 ...
0
votes
1answer
35 views

Using OpenVPN and iptables in combination

Let's imagine there are three networks, WAN, LAN-A and LAN-B. In between, there is a firewall server connecting the networks to each other. iptables ensures the following things: There is no way for ...
2
votes
1answer
115 views

How to route traffic through OpenVPN for the server only

I have a number of services running on my server to which I want to restrict access to only those connecting through OpenVPN. I did manage to get routing to work to a second IP I added to the ...
1
vote
3answers
383 views

How can I achieve OpenVPN client routing without NAT on Linode

I've set up an OpenVPN network, and it is working properly in the sense that I can access the inner/LAN machines from the remote client. However, my problem is that all traffic from the remote ...
2
votes
1answer
124 views

Redirect all traffic sent to an unallocated alias IP within a VPN subnet, to a fixed IP within another VPN

I have a server hosting multiple bridged (i.e. tap) VPNs using openvpn, where each VPN has a different 10.8.X.0/24 subnet. I wish to redirect traffic sent to a specific, unallocated IP address (e.g. ...
0
votes
1answer
54 views

Unable to get OpenVPN working on Ubuntu on an OpenVZ VPS

I have TUN/TAP enabled server.conf port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key dh dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push ...
0
votes
0answers
44 views

OpenVPN advanced privileged client access customization

I have implemented an OpenVPN server running on Tomato router (Let's call the router TR) the OpenVPN server is using TUN interface which means connections between clients and servers are based on ...
0
votes
1answer
301 views

Force OpenVPN Access Server clients through proxy?

I have an OpenVPN Access Server (v2.0.3) which I use to provide remote access to a dozen or so users, as well as a small site-to-site connection with a pfSense gateway. I am currently pushing a proxy ...
0
votes
0answers
58 views

customised client to client connection configuration inside OpenVPN server

I have two clients with common names [client_sina] and [client_extra] that are connecting to an OpenVPN server on remote place via (TUN21) running on Tomato Router The only physical port of the ...
1
vote
1answer
127 views

Reply on the same interface as incoming with DNATed IP

A server has 3 ifaces, 2 internal (eth1/2) in different public networks, one external (eth0). There is a service (openvpn) that can't bind to some IPs/ifaces, only to all or one, but I need it to ...
0
votes
1answer
122 views

force an application to use a given VPN tunnel

trying to have traffic from a specific user on a linux machine run through a vpn tunnel. Have tried without and with the update-resolv-conf / dhcp-options ~$ cat /etc/openvpn/pia.conf client dev tun ...
1
vote
0answers
46 views

OpenVPN running on Internet Gateway, so all private clients can access VPN with no config

Our LAN connects to our office gateway machine (192.168.1.1), which is connected to the Internet. I have setup NAT/Masquerading for this purpose with no issue. We also use OpenVPN to connect to our ...
0
votes
1answer
26 views

OpenVPN On Dual Wan

I have a Dual-WAN Linux Box WAN1 & WAN2, Installed on it OpenVPN Server, is there a way to make OpenVPN server accept connections from both interfaces, as it now it only accepts connection from ...
0
votes
2answers
160 views

How do I use OpenVPN for all traffic other than ports 80 and 22 (inbound and outbound)? [closed]

I use a dynamic DNS service which is sent ip address updates from my router. In router settings, ports 22 and 80 are forwarded to my server at 192.168.1.10. I have a webserver and sshd running on my ...
0
votes
0answers
99 views

OpenVPN on Ubuntu: IP Forwarding not working

I have successfully set up a VPN connection between a Windows 8 client and my Ubuntu server running OpenVPN. However, I just cannot get IP forwarding to work. I have adjusted all settings as desribed ...
4
votes
3answers
259 views

connected to Centos openvpn but no outside internet access

I am using Windows 7 to connect to a VPS server running CentOS 6.4 First off, I have read every single post and just cant find the solution to my problem I configured my VPN server with openvpn, and ...
0
votes
0answers
57 views

openvpn doesnt start due to iptables and mangle (VMware)

I have installed openvpnas on redhat5.10 via the package from openvpn. When I start the server it will start the webserver for administration but it wont start the the openvpn service. So I did my ...
1
vote
0answers
43 views

Open ports for VPN users

I have been looking around for some time for answer to this, and have yet to find one. The issue that I am having is that users that are connected to the VPN cannot do the following, as examples: ...
1
vote
2answers
386 views

Allow OpenVPN through a specific port - CentOS 6.5

I own a VPS (CentOS 6.5). I have installed OpenVPN on this server. Everything works fine, I can connect and surf, etc. Let's say my IP of the server is: 1.2.3.4. When I connect to my VPS my IP is ...
3
votes
1answer
717 views

iptables: access connected openvpn client from the LAN with the VPN server

I have what is essentially a routing problem, and I'm not familiar enough with routing and iptables to effectively troubleshoot and set up my network needs. What's working I have an openVPN network ...
0
votes
1answer
181 views

Route traffic to some host in Internet via VPN server

I need route traffic to some host in Internet via VPN server. Configuration: Computer: ubuntu-12.04 eth0 - x.x.x.x/24 tun0 - inet addr:10.8.0.6 P-t-P:10.8.0.5 Mask:255.255.255.255 There is ...
2
votes
1answer
1k views

OpenVPN not redirecting all traffic through VPN

I have just finished setting up my VPN, and google shows my IP to be that of my VPN, so this works fine. However, when I log in through SSH to the VPN server, it shows my last login to be that of my ...
1
vote
1answer
174 views

OpenVPN - VM-Setup with MacVTap, ICMP echo works, TCP/UPD don't

Short résumé No errors, no dropped packets, pings reach clients, tcpdump shows packages travelling, everything else never reaches the LAN hosts (or OpenVPN clients). Edit After trying to eliminate ...
1
vote
1answer
551 views

How to Access OpenVPN Client Subnet

I'm setting up a site-to-site OpenVPN, For now: Users on the client side can access the subnets on the server side. accessing the VPN client machine [Its IP on the client subnet] works fine. But ...
0
votes
1answer
108 views

How to bind traffic of each NAT client to a external IP address?

I have a NAT router with 2 IP addresses, lets say 111.111.111.111 and 222.222.222.222 associated with the interfaces eth0 and eth0:1 respectively. I have two servers that connect to this NAT gateway ...
-2
votes
2answers
516 views

Ports do not open after rules appended in iptables [closed]

I have a server that I am trying to setup for OpenVPN. I have followed all the steps, but I see that when I try to connect to it in Windows, it doesn't allow me, it just hangs on connecting, so I did ...
0
votes
0answers
311 views

Tomato RT-N16 - How to Prevent Multicast Packets from Reaching OpenVPN clients (TAP)

We have a remote (like in the woods) client using a VPN connection to connect to our office, using this link we can monitor and operate the remote client without a few hours drive in the wild. This ...
0
votes
1answer
25 views

How do I specify the external IP when using iptables masquerade?

I'm using this rule to allow internet access through OpenVPN: -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE However traffic via the VPN is coming from the box's primary IP. eth0 has a /29 ...
0
votes
1answer
35 views

No routing or forwarding, plain ssh from server

I'm currently developing on a system with distributed computers around the country. All of these are sitting behind a NAT and are self-controlled. As a Backup-plan if puppet fails or for other ...
0
votes
0answers
188 views

OpenVPN on Ubuntu 12.04 - unable to connect to internet

I'm trying to use OpenVPN on my Ubuntu 12.04 web server, but as soon as OpenVPN is running, I can't connect to the internet. Befor starting OpenVPN, route says: Kernel IP routing table Destination ...
0
votes
0answers
91 views

Make local OpenVPN server show client's IP as localhost

I have an OpenVPN server, Tomcat and Jenkins server all running on the same DigitalOcean instance. I want to only be able to access Jenkins' web interface when I'm connected to the VPN. I can close ...
5
votes
4answers
1k views

Openvpn, forward packets very slowly

I rebooted my server, and an odd issue just came out. I am running on ArchLinux, the clients are Ubuntu, Android and Mac. The problem is that accessing the internet via the clients is slow, about ...
0
votes
1answer
177 views

OpenVPN and “appropriately firewall the tun interface” (iptables)

In the default config of OpenVPN there is this commented blocked at the client-to-client line: # By default, clients will only see the server. # To force clients to only see the server, you # will ...
2
votes
3answers
1k views

iptables: combine SNAT with network remapping for OpenVPN

[Apologies for the long prelude; question halfway down.] I have a working OpenVPN setup whereby a VPN server pushes a route back to one client (hereafter called the “router”) which can then expose ...
0
votes
1answer
95 views

playing with ip route to connect to VPN and lost local internet

I'm following this tutorial about openVPN, every goes good until this following step on client (just before autostart section from wiki): # ip route add VPNSERVER_IP via LOCALGATEWAY_IP dev eth0 ...
0
votes
5answers
2k views

OpenVPN client connects but can't access internet

I setup an Openvpn server on a centos box and I can get the client to connect (osx) but can't access the internet or even the local network. I thought maybe DNS but couldn't access any sites via IP. ...
0
votes
1answer
146 views

Opening ports for VPN clients

I am trying to open specific ports for users so that they can use programs such as RDP. I have searched all over the internet, and have yet to find an answer to this question. I have tried every ...
0
votes
1answer
153 views

Create route through OpenVPN via specific IP address / virtual interface on Linux

I have a Linux server at home, on which I run an OpenVPN client connected to some server on the Net. What I want to archive is this: I want my home server to expose an interface (e.g. an IP address), ...
2
votes
1answer
601 views

OpenVPN bypass on some ports

This is my first question here, so please be kind :-). I have a server running Debian 7 and I would like to connect to a VPN and let all the traffic pass via the VPN except for some ports (SSH, ...
0
votes
0answers
111 views

Open port and route incoming traffic back to the connected client - OpenVPN

I did my own VPN setup on a CentOS box and it's working very nice and smooth. However I would like to add a feature that I open a specified port on the box for the incoming traffic that should be ...
1
vote
1answer
316 views

VPN chaining using openvpn

My boss got extra-paranoid and wants me to organize VPN-chaining of some sort for him. I come up with following scheme: Client VPN1 VPN2 ...
0
votes
2answers
462 views

Routing through OpenVPN gateway

I have the following setup: ++++++++++++++++++ + OpenVPN server +........ . . . . (cat pictures) ++++++++++++++++++ | | ...
2
votes
1answer
115 views

openvpn client cant reach external internet *solved

Setting up an openvpn server with tls auth and ip forwarding. I could connect to the vpn server just fine, but couldn't reach any outside connections I could not successfully ping 8.8.8.8 the ...
2
votes
2answers
884 views

OpenVPN - iptables restrict one IP's access to only some servers

I have a large OpenVPN network. Most of the addresses have free access to one another. However a few IPs need to be restricted to only a couple of other IPs. For example 10.8.0.6 can only be ...