Results 1 to 2 of 2

Thread: OPENVPN /IPTABLES help

  1. #1

    OPENVPN /IPTABLES help

    Hello, I have openvpn up and running successfully on FC9. I'm using routing mode with the following configuration

    My internal LAN range 10.10.10.0/24
    My Openvpn client range 10.8.0.0/24

    I can connect and ping the openvpn server from the openvpn client but can't talk to the other machines on the internal LAN subnet. However, the machines on the internal LAN subnet can ping the openvpn clients. I have entered the following in iptables.



    iptables -t nat -I POSTROUTING -s 10.10.10.0/24 -o eth0 -j MASQUERADE
    iptables -I INPUT -i tun+ -j ACCEPT
    iptables -I INPUT -i tap+ -j ACCEPT
    iptables -I FORWARD -i tap+ -j ACCEPT
    iptables -I FORWARD -i tun+ -j ACCEPT
    iptables -I INPUT -i eth0 -j ACCEPT
    iptables -I FORWARD -i eth0 -j ACCEPT


    I have also added a route on my d-link router that routes any traffic destined to 10.8.0.0/24 back to the OPENVPN server(10.10.10.xxx). This all works as it should when the firewall is disabled so apparently I'm missing some rule in iptables...Any help would be greatly appreciated..thanks..

  2. #2
    The fact that round trip communication occurs indicates the routing is OK. It's probably an access control issue. You should put a LOG and a DROP rule at the end of the INPUT, and FORWARD chains and see what the output of /var/log/messages says.

    Maybe you also need a FORWARD with -o (output) on the eth0, tap+ and tun+ interfaces.

    Maybe ICMP (ping) echo is being blocked from client side, but not ICMP echo-reply.

Similar Threads

  1. OpenVPN\IPtables routing problem!! Please help me out
    By Pumbaa in forum Linux - Hardware, Networking & Security
    Replies: 0
    Last Post: 01-25-2012, 10:59 AM
  2. Port foreword + openVPN + iptables ?
    By flan in forum Linux - Hardware, Networking & Security
    Replies: 2
    Last Post: 05-12-2011, 01:37 PM
  3. openvpn/networking change = kernel panic
    By the_guv in forum Linux - Hardware, Networking & Security
    Replies: 0
    Last Post: 12-21-2009, 02:37 PM
  4. Web GUI of OpenVPN
    By ohno in forum Linux - Hardware, Networking & Security
    Replies: 0
    Last Post: 11-07-2008, 06:48 PM
  5. iptables nat bug
    By tolstoy in forum Linux - Software, Applications & Programming
    Replies: 1
    Last Post: 05-11-2002, 05:18 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •