RE: [Openvpn-users] ping woes

Sorry, all my servers are running linux with the 2.4.25 kernel. I am running the firewall as stated on the openvpn HOWTO. should I be running some routing between NIC's ?

John

-----Original Message-----
From: Julio Maidanik [mailto:juliomaidanik@xxxxxxxxxxx]
Sent: Friday, April 30, 2004 9:42 PM
To: John Freeman; openvpn-users@xxxxxxxxxxxxxxxxxxxxx
Subject: Re: [Openvpn-users] ping woes

Hi,

You don't tell whether your servers are Linux or Windows, and whether you have firewall.

I don't see anything wrong with your configuration, so I would suggest you to check the firewall rules.

Julio

----- Original Message -----

From: John Freeman

To: openvpn-users@xxxxxxxxxxxxxxxxxxxxx

Sent: Friday, April 30, 2004 10:14 AM

Subject: [Openvpn-users] ping woes

Hi

Assume the following :- eth0 is always public facing, eth1 is always private facing

Server A: eth0=80.176.109.123 eth1=192.168.0.1

Server B: eth0=81.137.149.27 eth1=192.168.2.34

Both use OpenVPN 1.5.0 (gentoo build)

Server A

------------

dev tun

# Our OpenVPN peer is the office gateway.
remote 81.137.149.27

ifconfig 192.168.200.2 192.168.200.1

# Our up script will establish routes
# once the VPN is alive.
up ./home.up
<--snip-->

home.up contains route add -net 192.168.2.0 netmask 255.255.255.0 gw $5

Server B

-----------

dev tun

ifconfig 192.168.200.1 192.168.200.2

# Our up script will establish routes
# once the VPN is alive.
up ./office.up

<--snip-->

office.up contains route add -net 192.168.0.0 netmask 255.255.255.0 gw $5

======

I can establish a connection between both servers ok. I can even ping the end points of the tunnel, aswell as the servers private IP address. What I cant do is ping any machines attached to the private network from the other network. I set verb to 8. and when I ping a machine on the network I get UDPv4 READ [124] from 80.176.109.123:5000 DATA len=60 but no WRITE. If I ping the servers private IP I get the WRITE and READ.

vpn VPN# tcpdump -i tun0

14:14:56 954426 IP 192.168.200.2 > 192.168.2.1: icmp 64: echo request seq 1

etc.

I have proc/sys/net/ipv4/ip_forward containing 1.

I cant ping, and I definately can NOT ssh into any of the boxes. Why?

Help please!!!!

Regards

John Freeman