I have one root server and two clients. The root server has a static ip address and runs Debian Linux. My clients are Mac OS X and Debian Linux with dynamic ip addresses.
From my clients I can open a vpn connection but the traffic is blocked by Shorewall. The Shorewall log told me that the traffic comes from net zone to fw zone (fw is the server zone, I don't have a local zone because it is only one machine) but it should be from vpn zone to fw zone or not?
This is one line from the log:
net-fw:DROP:IN=tun0 OUT= SRC=10.8.0.3 DST=10.8.0.1 PROTO=TCP SPT=37744 DPT=3000
And this are my config files:
port 1194 proto udp dev tun ca ca.crt cert me.crt key me.key dh dh2048.pem topology subnet server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo user nobody group nogroup persist-key persist-tun status openvpn-status.log verb 3
client dev tun proto udp remote xx.xx.xx.xx 1194 resolv-retry infinite nobind user nobody group nogroup persist-key persist-tun ca ca.crt cert debian.crt key debian.key remote-cert-tls server comp-lzo verb 3
net all physical=+ vpn tun+
fw firewall net ip vpn ipv4
$FW net ACCEPT vpn $FW ACCEPT info net all DROP info all all REJECT info
Invalid(DROP) net $FW tcp ACCEPT:info net $FW udp 1194 ACCEPT:info vpn $FW ACCEPT:info $FW vpn
openvpnserver:1194 net 0.0.0.0/0