I set up a network in my studio's office with a Raspberry Pi serving as a VPN server for remote clients to access LAN resources.
Router port-forwards 1194 port to RPi, so it's accessible from the Internet.
After some time, I successfully set up OpenVPN with Shorewall to grant VPN clients access to selected LAN servers. But for some reason, VPN clients can't access Internet at all.
Here's my Shorewall setup:
I set up my three zones in zones, interfaces and host files.
#ZONE TYPE fw firewall net ipv4 loc:net ipv4 vpn ipv4
#ZONE INTERFACE OPTIONS net eth0 dhcp,tcpflags,nosmurfs,routefilter,logmartians,sourceroute=0 vpn tun0
#ZONE HOSTS loc eth0:192.168.200.0/24 (LAN subnet)
There's an entry in tunnels file for OpenVPN server:
#TYPE ZONE GATEWAY openvpnserver net 0.0.0.0/0
Packets from VPN to eth0 are masqueraded, since the default gateway for LAN clients is the router, not RPi.
#INTERFACE SOURCE ADDRESS eth0 10.8.0.0/24 (VPN subnet) 192.168.200.54 (local RPi address)
policy rejects connections from vpn to loc and accepts connections from vpn to net. Specific connections from vpn to loc are accepted in rules file.
What did I miss? Why VPN clients can't access Internet?