magikid
February 5th, 2010, 12:41 AM
Ok, I've looked high and low to solve this. My problem is that I'm migrating from my old server (oldie) to a new one (theprofessor).
I have installed the same version of OpenVPN on the new one and I have copied the config file from the old to the new. On theprofessor, I can connect to the VPN and access resources on it and surf the web through it from my laptop. On theprofessor, I can connect to the VPN and access resources on it but I can't surf the web through it.
My first thought was maybe a firewall issue so on my laptop and theprofessor I ran
sudo iptables -F and I also made sure that my laptop was in the DMZ of my router. It didn't make any difference. I started looking through the log on theprofessor and it turns out that it's being flooded with this:
Thu Feb 4 23:10:57 2010 philipjfry/[ext IP addr]:57064 MULTI: bad source address from client [192.168.1.101], packet dropped
Note: philipjfry is my laptop and 192.168.1.101 is the IP assigned to me by my router.
Can anyone help me figure out why it's dropping all my packets?
Here's the server config:
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/theprofessor.crt
key /etc/openvpn/easy-rsa/2.0/keys/theprofessor.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh2048.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status openvpn-status.log
verb 3
client-to-client
push "redirect-gateway def1"
log-append /var/log/openvpn
comp-lzo
#management localhost 7505
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
ping 10
ping-restart 120
There is no client config. I'm connecting with the NetworkManager.
I have installed the same version of OpenVPN on the new one and I have copied the config file from the old to the new. On theprofessor, I can connect to the VPN and access resources on it and surf the web through it from my laptop. On theprofessor, I can connect to the VPN and access resources on it but I can't surf the web through it.
My first thought was maybe a firewall issue so on my laptop and theprofessor I ran
sudo iptables -F and I also made sure that my laptop was in the DMZ of my router. It didn't make any difference. I started looking through the log on theprofessor and it turns out that it's being flooded with this:
Thu Feb 4 23:10:57 2010 philipjfry/[ext IP addr]:57064 MULTI: bad source address from client [192.168.1.101], packet dropped
Note: philipjfry is my laptop and 192.168.1.101 is the IP assigned to me by my router.
Can anyone help me figure out why it's dropping all my packets?
Here's the server config:
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/theprofessor.crt
key /etc/openvpn/easy-rsa/2.0/keys/theprofessor.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh2048.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status openvpn-status.log
verb 3
client-to-client
push "redirect-gateway def1"
log-append /var/log/openvpn
comp-lzo
#management localhost 7505
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
ping 10
ping-restart 120
There is no client config. I'm connecting with the NetworkManager.