From: Kapetanakis Giannis <bilias@edu.physics.uoc.gr>
To: netfilter@vger.kernel.org
Subject: Re: NAT wont work for my OpenVPN
Date: Fri, 25 Sep 2009 18:59:27 +0300 [thread overview]
Message-ID: <4ABCE8DF.6020002@edu.physics.uoc.gr> (raw)
In-Reply-To: <200909251540.21114.Thomas.Hluchnik@netcologne.de>
On 25/09/09 16:40, Thomas.Hluchnik@netcologne.de wrote:
> Hello,
>
> I am a bit new to ipfilter stuff and didnt succeed in forwarding my OpenVPN traffic. Maybe someone is able to tell me the iptables commands.
>
> Situation: I got a dedicated Rootserver with one network interface. Some days ago I setup a OpenVPN server (IP-Range 10.47.11.0/24) on that box which works for itself. At home I have a OpenVPN client connected to the server, which works, too. I can ping the tun Interface of the server, I can login through the VPN channel on the server and I can dig @tun-interface any-domain.
>
Check that you have ip forwarding enabled.
cat /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/ip_forward (to enable it)
man sysctl (also check openvpn startup script)
to make the changes permanent.
There should also be a FORWARD line in you firewall
something like this (if you use the tun interface):
iptables -A FORWARD -i tun+ -s 10.47.11.0/24 -j ACCEPT
Giannis
prev parent reply other threads:[~2009-09-25 15:59 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-09-25 13:40 NAT wont work for my OpenVPN Thomas.Hluchnik
2009-09-25 14:25 ` Thomas Jacob
2009-09-25 15:59 ` Kapetanakis Giannis [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4ABCE8DF.6020002@edu.physics.uoc.gr \
--to=bilias@edu.physics.uoc.gr \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.