I have been installed OpenVPN server on my CentOs VPS, and it started successfully

And try to configure iptables for it by following command:

iptables -A FORWARD -m state -–state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s -j SNAT --to

But I can't connect to it,so I run nmap on my computer:

nmap -p 1194

Starting Nmap 5.21 ( http://nmap.org ) at 2011-12-27 22:28 IRST
Nmap scan report for (
Host is up (0.53s latency).
1194/tcp closed unknown

Nmap done: 1 IP address (1 host up) scanned in 3.22 seconds

Now where is the problem and how should I solve it? Why 1194 is closed after install OpenVPN?

I have followed http://tipupdate.com/how-to-install-openvpn-on-centos-vps/ to install and configure it.


Just to note, your nmap scan was against TCP/1194. By default, OpenVPN will use UDP/1194, so your scan, as specified, isn't looking at the right place. Add the -sU option to scan for UDP, like this: nmap -sU -p 1194

In any case, make sure the openvpn daemon is running (ps auxw |grep openvpn) and the netstat command that Khaled posted. If you have default DENY on iptables, you will need to open up UDP/1194 also.

| improve this answer | |

First, you need to make sure the service is running and listening on the expected port. You can use:

$ netstat -lnp

Second, it is not clear whether you are running iptables on the same server or on another one. Make sure you enable IP forwarding if iptables is configured on another machine. If these rules are applied on the same VPN server, you need to add the accept rules to 'INPUT' chain.

| improve this answer | |

Don't you need to have the port open in the RH-Firewall-1-INPUT or INPUT chains ?

iptables -I RH-Firewall-1-INPUT -p udp -m udp --dport 1194 -j ACCEPT


iptables -I INPUT -p udp -m udp --dport 1194 -j ACCEPT
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.