Re: OPENVPN /IPTABLES help

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Does dropping the MASQUERADE change things at all?



On Thu, 2008-11-06 at 09:28 +0100, woodson2 wrote:
Hello, I have openvpn up and running successfully on FC9. I'm using routing mode with the following configuration

My internal LAN range 10.10.10.0/24
My Openvpn client range 10.8.0.0/24

I can connect and ping the openvpn server from the openvpn client but can't talk to the other machines on the internal LAN subnet. However, the machines on the internal LAN subnet can ping the openvpn clients. I have entered the following in iptables.
iptables -t nat -I POSTROUTING -s 10.10.10.0/24 -o eth0 -j MASQUERADE
iptables -I INPUT -i tun+ -j ACCEPT
iptables -I INPUT -i tap+ -j ACCEPT
iptables -I FORWARD -i tap+ -j ACCEPT
iptables -I FORWARD -i tun+ -j ACCEPT
iptables -I INPUT -i eth0 -j ACCEPT
iptables -I FORWARD -i eth0 -j ACCEPT
I have also added a route on my d-link router that routes any traffic destined to 10.8.0.0/24 back to the OPENVPN server(10.10.10.xxx). This all works as it should when the firewall is disabled so apparently I'm missing some rule in iptables...Any help would be greatly appreciated..thanks..


-- 
This is an email sent via The Fedora Community Portal https://fcp.surfsite.org
https://fcp.surfsite.org/modules/newbb/viewtopic.php?post_id=301697&topic_id=63522&forum=10#forumpost301697
If you think, this is spam, please report this to webmaster@xxxxxxxxxxxxxxxx and/or blame mlstarling31@xxxxxxxxxxx.

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux