OpenVPN all trafic through but no access to remote LANClient unable to reach Internet through OpenVPNiptables questionOpenVPN server will not redirect trafficEnsure PPTP / OpenVPN clients cannot interact with each other?ubuntu route all client eth0 traffic to openvpn on client tun0Connect AWS and Azure via OpenVPNCent OS - OpenVPN client connects but can't access internetNO routing in VPN to client sideSetting up OpenVPN on macOs Sierra- No Internet Access on clientRouting and OpenVPN not running on the default gateway
What is the purpose of the yellow wired panels on the IBM 360 Model 20?
Why Emacs (dired+) asks me twice to delete file?
One word for 'the thing that attracts me'?
What is the limit to a Glyph of Warding's trigger?
How to escape dependency hell?
How would a developer who mostly fixed bugs for years at a company call out their contributions in their CV?
Complications of displaced core material?
Are there historical examples of audiences drawn to a work that was "so bad it's good"?
How to create a `range`-like iterable object of floats?
Are there guidelines for finding good names for LaTeX 2e packages and control sequences defined in these packages?
Goldfish unresponsive, what should I do?
Why was this character made Grand Maester?
Split into three!
Possibility of faking someone's public key
Why A=2 and B=1 in the call signs for Spirit and Opportunity?
Visual Block Mode edit with sequential number
Flatten not working
Why do testers need root cause analysis?
To exponential digit growth and beyond!
Why is the Eisenstein ideal paper so great?
resolution bandwidth
Is keeping the forking link on a true fork necessary (Github/GPL)?
Why does the painters tape have to be blue?
What did Brienne write about Jaime?
OpenVPN all trafic through but no access to remote LAN
Client unable to reach Internet through OpenVPNiptables questionOpenVPN server will not redirect trafficEnsure PPTP / OpenVPN clients cannot interact with each other?ubuntu route all client eth0 traffic to openvpn on client tun0Connect AWS and Azure via OpenVPNCent OS - OpenVPN client connects but can't access internetNO routing in VPN to client sideSetting up OpenVPN on macOs Sierra- No Internet Access on clientRouting and OpenVPN not running on the default gateway
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Goal: be able to route all the trafic through the OpenVPN server and being able to communicate with the remote DNS (127.128.129.130) and the remote LAN (12x.x.x.x)
I have added to the OpenVPN client config file redirect-gateway def1.
As decribed here, I have added the three rules to iptables (in case the post is deleted):
iptables -I FORWARD -i tun0 -o eth0
-s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -m conntrack --ctstate RELATED,ESTABLISHED
-j ACCEPT
iptables -t nat -I POSTROUTING -o eth0
-s 10.8.0.0/24 -j MASQUERADE
Which works great except that I cannot resolve hosts on my private DNS. I might be due to the first FORWARD rule which forward all trafic from tun0 to eth0.
How can I do so the trafic to the remote DNS and LAN does not go away?
openvpn nat internal-dns
asked May 9 at 6:25
KaymazKaymaz
236
add a comment |
Goal: be able to route all the trafic through the OpenVPN server and being able to communicate with the remote DNS (127.128.129.130) and the remote LAN (12x.x.x.x)
I have added to the OpenVPN client config file redirect-gateway def1.
As decribed here, I have added the three rules to iptables (in case the post is deleted):
iptables -I FORWARD -i tun0 -o eth0
-s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -m conntrack --ctstate RELATED,ESTABLISHED
-j ACCEPT
iptables -t nat -I POSTROUTING -o eth0
-s 10.8.0.0/24 -j MASQUERADE
Which works great except that I cannot resolve hosts on my private DNS. I might be due to the first FORWARD rule which forward all trafic from tun0 to eth0.
How can I do so the trafic to the remote DNS and LAN does not go away?
openvpn nat internal-dns
asked May 9 at 6:25
KaymazKaymaz
236
If you're going to change IP addresses, then just replce the first byte with 10. 127/8 is the loopback network and won't get routed. The first rule doesn't do the forwarding, it allows the forwarding; subtle difference.
– wurtel
May 9 at 6:43
add a comment |
Goal: be able to route all the trafic through the OpenVPN server and being able to communicate with the remote DNS (127.128.129.130) and the remote LAN (12x.x.x.x)
I have added to the OpenVPN client config file redirect-gateway def1.
As decribed here, I have added the three rules to iptables (in case the post is deleted):
iptables -I FORWARD -i tun0 -o eth0
-s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -m conntrack --ctstate RELATED,ESTABLISHED
-j ACCEPT
iptables -t nat -I POSTROUTING -o eth0
-s 10.8.0.0/24 -j MASQUERADE
Which works great except that I cannot resolve hosts on my private DNS. I might be due to the first FORWARD rule which forward all trafic from tun0 to eth0.
How can I do so the trafic to the remote DNS and LAN does not go away?
openvpn nat internal-dns
asked May 9 at 6:25
KaymazKaymaz
236
Goal: be able to route all the trafic through the OpenVPN server and being able to communicate with the remote DNS (127.128.129.130) and the remote LAN (12x.x.x.x)
I have added to the OpenVPN client config file redirect-gateway def1.
As decribed here, I have added the three rules to iptables (in case the post is deleted):
iptables -I FORWARD -i tun0 -o eth0
-s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -m conntrack --ctstate RELATED,ESTABLISHED
-j ACCEPT
iptables -t nat -I POSTROUTING -o eth0
-s 10.8.0.0/24 -j MASQUERADE
Which works great except that I cannot resolve hosts on my private DNS. I might be due to the first FORWARD rule which forward all trafic from tun0 to eth0.
How can I do so the trafic to the remote DNS and LAN does not go away?
openvpn nat internal-dns
openvpn nat internal-dns
asked May 9 at 6:25
KaymazKaymaz
236
asked May 9 at 6:25
KaymazKaymaz
236
asked May 9 at 6:25
KaymazKaymaz
236
asked May 9 at 6:25
KaymazKaymaz
236
asked May 9 at 6:25
KaymazKaymaz
236
236
If you're going to change IP addresses, then just replce the first byte with 10. 127/8 is the loopback network and won't get routed. The first rule doesn't do the forwarding, it allows the forwarding; subtle difference.
– wurtel
May 9 at 6:43
add a comment |
If you're going to change IP addresses, then just replce the first byte with 10. 127/8 is the loopback network and won't get routed. The first rule doesn't do the forwarding, it allows the forwarding; subtle difference.
– wurtel
May 9 at 6:43
If you're going to change IP addresses, then just replce the first byte with 10. 127/8 is the loopback network and won't get routed. The first rule doesn't do the forwarding, it allows the forwarding; subtle difference.
– wurtel
May 9 at 6:43
If you're going to change IP addresses, then just replce the first byte with 10. 127/8 is the loopback network and won't get routed. The first rule doesn't do the forwarding, it allows the forwarding; subtle difference.
– wurtel
May 9 at 6:43
add a comment |
1 Answer
1
active
oldest
votes
It seems you are not using the remote dns server. You can use openvpn to set the dns server too. Then the name resolution for your private network should work.
push "dhcp-option DNS 127.128.129.130"
See here:
https://openvpn.net/community-resources/pushing-dhcp-options-to-clients/
answered May 9 at 6:46
DiamantDiamant
7,56831733
I am already pushing dns, sorry, it's not explicit in my post.
– Kaymaz
May 9 at 7:04
@Kaymaz, does it also get set in client interface? You can check it with ipconfig. You may also try adding domain name toopush dhcp-option DOMAIN example.local. Apart from that, what client are you using?
– Diamant
May 9 at 7:11
I'm pushing DNS through the client config. I'm using OpenVPN GUI for Windows.
– Kaymaz
May 9 at 7:13
@Kaymaz, first thing to check would be to see if it gets assigned correctly. Can you see it using ipconfig?
– Diamant
May 9 at 10:52
Yes I do. In fact the configuration client/server works well (DNS access, remote LAN, internet access). I lose DNS and remote LAN access only when I send all my internet traffic through OpenVPN
– Kaymaz
May 9 at 12:16
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f966506%2fopenvpn-all-trafic-through-but-no-access-to-remote-lan%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
It seems you are not using the remote dns server. You can use openvpn to set the dns server too. Then the name resolution for your private network should work.
push "dhcp-option DNS 127.128.129.130"
See here:
https://openvpn.net/community-resources/pushing-dhcp-options-to-clients/
answered May 9 at 6:46
DiamantDiamant
7,56831733
I am already pushing dns, sorry, it's not explicit in my post.
– Kaymaz
May 9 at 7:04
@Kaymaz, does it also get set in client interface? You can check it with ipconfig. You may also try adding domain name toopush dhcp-option DOMAIN example.local. Apart from that, what client are you using?
– Diamant
May 9 at 7:11
I'm pushing DNS through the client config. I'm using OpenVPN GUI for Windows.
– Kaymaz
May 9 at 7:13
@Kaymaz, first thing to check would be to see if it gets assigned correctly. Can you see it using ipconfig?
– Diamant
May 9 at 10:52
Yes I do. In fact the configuration client/server works well (DNS access, remote LAN, internet access). I lose DNS and remote LAN access only when I send all my internet traffic through OpenVPN
– Kaymaz
May 9 at 12:16
add a comment |
It seems you are not using the remote dns server. You can use openvpn to set the dns server too. Then the name resolution for your private network should work.
push "dhcp-option DNS 127.128.129.130"
See here:
https://openvpn.net/community-resources/pushing-dhcp-options-to-clients/
answered May 9 at 6:46
DiamantDiamant
7,56831733
I am already pushing dns, sorry, it's not explicit in my post.
– Kaymaz
May 9 at 7:04
@Kaymaz, does it also get set in client interface? You can check it with ipconfig. You may also try adding domain name toopush dhcp-option DOMAIN example.local. Apart from that, what client are you using?
– Diamant
May 9 at 7:11
I'm pushing DNS through the client config. I'm using OpenVPN GUI for Windows.
– Kaymaz
May 9 at 7:13
@Kaymaz, first thing to check would be to see if it gets assigned correctly. Can you see it using ipconfig?
– Diamant
May 9 at 10:52
Yes I do. In fact the configuration client/server works well (DNS access, remote LAN, internet access). I lose DNS and remote LAN access only when I send all my internet traffic through OpenVPN
– Kaymaz
May 9 at 12:16
add a comment |
It seems you are not using the remote dns server. You can use openvpn to set the dns server too. Then the name resolution for your private network should work.
push "dhcp-option DNS 127.128.129.130"
See here:
https://openvpn.net/community-resources/pushing-dhcp-options-to-clients/
answered May 9 at 6:46
DiamantDiamant
7,56831733
It seems you are not using the remote dns server. You can use openvpn to set the dns server too. Then the name resolution for your private network should work.
push "dhcp-option DNS 127.128.129.130"
See here:
https://openvpn.net/community-resources/pushing-dhcp-options-to-clients/
answered May 9 at 6:46
DiamantDiamant
7,56831733
answered May 9 at 6:46
DiamantDiamant
7,56831733
answered May 9 at 6:46
DiamantDiamant
7,56831733
answered May 9 at 6:46
DiamantDiamant
7,56831733
7,56831733
I am already pushing dns, sorry, it's not explicit in my post.
– Kaymaz
May 9 at 7:04
@Kaymaz, does it also get set in client interface? You can check it with ipconfig. You may also try adding domain name toopush dhcp-option DOMAIN example.local. Apart from that, what client are you using?
– Diamant
May 9 at 7:11
I'm pushing DNS through the client config. I'm using OpenVPN GUI for Windows.
– Kaymaz
May 9 at 7:13
@Kaymaz, first thing to check would be to see if it gets assigned correctly. Can you see it using ipconfig?
– Diamant
May 9 at 10:52
Yes I do. In fact the configuration client/server works well (DNS access, remote LAN, internet access). I lose DNS and remote LAN access only when I send all my internet traffic through OpenVPN
– Kaymaz
May 9 at 12:16
add a comment |
I am already pushing dns, sorry, it's not explicit in my post.
– Kaymaz
May 9 at 7:04
@Kaymaz, does it also get set in client interface? You can check it with ipconfig. You may also try adding domain name toopush dhcp-option DOMAIN example.local. Apart from that, what client are you using?
– Diamant
May 9 at 7:11
I'm pushing DNS through the client config. I'm using OpenVPN GUI for Windows.
– Kaymaz
May 9 at 7:13
@Kaymaz, first thing to check would be to see if it gets assigned correctly. Can you see it using ipconfig?
– Diamant
May 9 at 10:52
Yes I do. In fact the configuration client/server works well (DNS access, remote LAN, internet access). I lose DNS and remote LAN access only when I send all my internet traffic through OpenVPN
– Kaymaz
May 9 at 12:16
I am already pushing dns, sorry, it's not explicit in my post.
– Kaymaz
May 9 at 7:04
I am already pushing dns, sorry, it's not explicit in my post.
– Kaymaz
May 9 at 7:04
@Kaymaz, does it also get set in client interface? You can check it with ipconfig. You may also try adding domain name too
push dhcp-option DOMAIN example.local. Apart from that, what client are you using?– Diamant
May 9 at 7:11
@Kaymaz, does it also get set in client interface? You can check it with ipconfig. You may also try adding domain name too
push dhcp-option DOMAIN example.local. Apart from that, what client are you using?– Diamant
May 9 at 7:11
I'm pushing DNS through the client config. I'm using OpenVPN GUI for Windows.
– Kaymaz
May 9 at 7:13
I'm pushing DNS through the client config. I'm using OpenVPN GUI for Windows.
– Kaymaz
May 9 at 7:13
@Kaymaz, first thing to check would be to see if it gets assigned correctly. Can you see it using ipconfig?
– Diamant
May 9 at 10:52
@Kaymaz, first thing to check would be to see if it gets assigned correctly. Can you see it using ipconfig?
– Diamant
May 9 at 10:52
Yes I do. In fact the configuration client/server works well (DNS access, remote LAN, internet access). I lose DNS and remote LAN access only when I send all my internet traffic through OpenVPN
– Kaymaz
May 9 at 12:16
Yes I do. In fact the configuration client/server works well (DNS access, remote LAN, internet access). I lose DNS and remote LAN access only when I send all my internet traffic through OpenVPN
– Kaymaz
May 9 at 12:16
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f966506%2fopenvpn-all-trafic-through-but-no-access-to-remote-lan%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
If you're going to change IP addresses, then just replce the first byte with 10. 127/8 is the loopback network and won't get routed. The first rule doesn't do the forwarding, it allows the forwarding; subtle difference.
– wurtel
May 9 at 6:43