Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

All Set, but from VPN Client i can´t reach other network... #58

Closed
ozburn opened this issue Oct 19, 2017 · 1 comment
Closed

All Set, but from VPN Client i can´t reach other network... #58

ozburn opened this issue Oct 19, 2017 · 1 comment

Comments

@ozburn
Copy link

ozburn commented Oct 19, 2017

Cad,
Hello..!! Great improove i see already on OVPM, Thankyou..!!

    I Have a problem about network access through VPN CLient...  Let´s Picture First..

ovpm version 0.2.6

root@stargate:~# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.0.25.1 0.0.0.0 UG 0 0 0 eth0
10.0.25.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.74.0.0 0.0.0.0 255.255.248.0 U 0 0 0 tun0

root@stargate:/var/db/ovpm/ccd# cat /proc/sys/net/ipv4/ip_forward
1

`
root@stargate:/var/db/ovpm/ccd# ovpm net list
+---+-----------------+---------------------------+-----------+----------+--------------------------------+
| # | NAME | CIDR | TYPE | ASSOC | CREATED AT |
+---+-----------------+---------------------------+-----------+----------+--------------------------------+
| 1 | 10.0.10.0_NET24 | 10.0.10.0/24 | SERVERNET | lucianol | Thu Oct 19 13:09:16 -0200 2017 |
| 2 | 10.0.10.1 | 10.0.10.1/32 via 10.1.1.1 | ROUTE | lucianol | Thu Oct 19 13:09:52 -0200 2017 |
+---+-----------------+---------------------------+-----------+----------+--------------------------------+

´
The Above networks are added to the user CCD file , i mean, from users perspective, there is no difference between SERVERNET e ROUTE , i mean the only diiference is visual organization on OVPM list , and the option to define a gateway in route..!! In the example , i specified a gateway to my local router to avoid go through the VPN , nice.!!! it´s Work..!!

But i can´t acess through VPN the other IP´s on 10.0.10.0/24 network....
I start a TCPDump on OVPM Server to watch incoming packets passing through...

           tcpdump -i tun0 | grep 10.0.10.5

Ok, i receive the packets on Tun0 interface, but when i do a TCPDump on ETH0 , the packets not passing through TUN0 > ETH0 ( used command, tcpdump -i eth0 | grep 10.0.10.5 )

ALready check IPV4 Forwarding and its ok..!!!
Iptables is disable as a service and the default rules is ok from my point of view...


root@stargate:/var/db/ovpm/ccd# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

I HAve The Routes pointing to my OVPM server for th 10.0.74.0/21 network and a Access Rule
allowing Any traffic for this network, but since the packets aren´t passing through TUN0 > ETH0 locally, the problem still on my OVPM Server.!!

The option client-to-client on openvpn servers config ?? did you belive can be a probem.!? , i comented this option on openvpn server.config , restart openvpn manually and confirmed that still on server.config after restart, but nothing changes, i still can´t capture any packet from Tun0 > Eth0.

Any Suggestion.!?

If this is a Bad palce to talk about, please forgive me.. , and my Bad English too..

Thankyou..!!
Ozburn.

@cad
Copy link
Owner

cad commented Oct 20, 2017

Hi @ozburn,

Issues are welcomed. But there is a problem with the styling of your issues. Please format them properly if you can, as it's difficult for us to read them this way.

You can use this guide for more information about styling your issues.

Also, although you can always open an issue about a problem, bug, feature request or questions about undocumented parts of the ovpm; you can also send an email to mustafa@arici.io about anything related to OVPM that doesn't deserve a seperate issue in your opinion.

@ozburn ozburn closed this as completed Oct 21, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants