OpenVPN: not redirecting http traffic

jp-lack · 10-22-2008, 10:51 AM

Hi

I have set up a openvpn server which seems to be running fine; however, when the client connects it wont redirect the traffic for HTTP/FTP

I was reading around and seems like I had to add 'redirect-gateway def1' into server.conf -- I did that but now when the client connects it losses connection with everything but the vpn server

Code:

Wed Oct 22 10:39:48 2008 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9'
Wed Oct 22 10:39:48 2008 OPTIONS IMPORT: timers and/or timeouts modified
Wed Oct 22 10:39:48 2008 OPTIONS IMPORT: --ifconfig/up options modified
Wed Oct 22 10:39:48 2008 OPTIONS IMPORT: route options modified
Wed Oct 22 10:39:48 2008 TUN/TAP device tun0 opened
Wed Oct 22 10:39:48 2008 /sbin/ip link set dev tun0 up mtu 1500
Wed Oct 22 10:39:48 2008 /sbin/ip addr add dev tun0 local 10.8.0.10 peer 10.8.0.9
Wed Oct 22 10:39:48 2008 /sbin/ip route add 69.72.210.186/32 via 192.168.1.1
Wed Oct 22 10:39:48 2008 /sbin/ip route add 0.0.0.0/1 via 10.8.0.9
Wed Oct 22 10:39:48 2008 /sbin/ip route add 128.0.0.0/1 via 10.8.0.9
Wed Oct 22 10:39:48 2008 /sbin/ip route add 10.8.0.1/32 via 10.8.0.9
Wed Oct 22 10:39:48 2008 Initialization Sequence Completed

I can ping 10.8.0.1 and 69.72.210.186 when connected -- but thats it; I cant ping nothing else

Any ideas?

Thanks,

Matir · 10-22-2008, 02:31 PM

Is the server properly set up to route packets? (ip_forwarding and, if necessary, NAT)?

jp-lack · 10-22-2008, 05:55 PM

yeah i have /proc/sys/net/ipv4/ip_forward set to 1

the client gets the IP and can ping the server

If i restart the openvpn server without "redirect-gateway def1" the client wont lose the connectivity but the http traffic will be from the default source IP

is there any iptable rules i have to add?