[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: Re: [Openvpn-users] howto change gateway???


  • Subject: Re: Re: [Openvpn-users] howto change gateway???
  • From: John Locke <mail@xxxxxxxxxxxx>
  • Date: Sun, 04 Apr 2004 11:05:09 -0700

On Sun, 2004-04-04 at 07:02, rene pedersen wrote:
> Thanks again for the help.
> 
> I am leading you in the wrong direction. I think I have a routing problem.
> 
If you can ping through the tunnel, it's not a routing problem.

> When I establish the tunnel within the LAN with the samba server, I am able
> to
> 1) ping the samba server through the tunnel (ip 10.3.0.1), 
> and after I have restarted the samba server, I can 
> 2) connect to the samba server through the tunnel (ip 10.3.0.1).
> 
> This I can do without the "interfaces = ..." and WINS settings in the
> smb.conf.
> 
> However, when I establish the tunnel over the internet I can only ping
> through the tunnel. When I run "\\10.3.0.1" no connection to the samba server is
> found.
> 
> So the problem arises, when I try to connect to the samba server through:
> 
> XP openvpn client
> 192.168.2.x
> 	|
> 	V
> 192.168.2.1
> Firewall box
> 192.168.1.1
> 	|
> 	V
> 192.168.1.100
> cable modem
> a.b.c.d
> 	|
> 	V
> Internet
> 	|
> 	V
> e.f.g.h
> ADSL-modem
> 192.168.1.1
> 	|
> 	V
> 192.168.1.2
> Firewall box
> 192.168.2.1
> 	|
> 	V
> 192.168.2.y
> Samba server
> 		    
> Why can I ping through the tunnel, but not connect to the samba server?

Okay, obviously it's some issue with Windows networking. It looks like
Renato can help you with the server end, but the problem might also be
on the client.

Two possibilities: firewall or NetBIOS not enabled on the tun device. It
could be that while you're connected to the LAN, Windows Networking is
simply bypassing the tap device and using the NIC directly, unencrypted,
to connect to the Samba server (because it broadcasts a request for a
server matching the name, and your Samba server answers, even though
it's not using that interface at the time...)

If you've recently upgraded to Windows XP Service Pack 2, the Windows
Firewall has probably been "helpfully" turned on for you. In Network
Connections, open the properties page for the tap device, go to the
Advanced tab, and check your firewall settings (turn it off completely
for this device). If you have any other firewall running on your client,
check its settings, too.

The other thing is whether the client will pass NetBIOS requests through
the tunnel. In the advanced properties for the tap device, make sure
Client for Microsoft Networks is listed. Then go into the TCP/IP
settings for the connection, and look on the WINS tab. I forget which
option you need--somehow you need to allow NetBIOS over TCP/IP. And
while you're there, give it the IP address for the WINS server, because
the broadcast won't get routed through the tunnel. And make sure you
turn WINS on on the Samba server...

Restart your computer if you made any changes, and it should work...

Hope that helps...
Cheers,
-- 
John Locke
Open Source solutions for small business problems
http://freelock.com


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users