Tema: VPN klausimas
Autorius: Ingodas Vytrastas
Data: 2010-01-22 13:14:57
# route -n
Kernel IP routing table
Destination  Gateway         Genmask         Flags  Iface
10.8.0.2       10.8.0.1        255.255.255.255 UGH  tun0
10.8.0.2       0.0.0.0         255.255.255.255 UH   tun0
192.168.3.0    10.8.0.1        255.255.255.0   UG   tun0
192.168.232.0  0.0.0.0         255.255.255.0   U    eth1
76.60.64.0     0.0.0.0         255.255.192.0   U    eth0
192.168.15.0   10.8.0.1        255.255.255.0   UG   tun0
0.0.0.0        76.60.127.254   0.0.0.0         UG   eth0

gw:~# ping 10.8.0.2
PING 10.8.0.2 (10.8.0.2) 56(84) bytes of data.
^C
--- 10.8.0.2 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2016ms

gw daemon.log:

Jan 22 13:07:25 gw openvpn[11958]: Data Channel MTU parms [ L:1545 
D:1450 EF:45 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 22 13:07:25 gw openvpn[11958]: Local Options String: 'V4,dev-type 
tun,link-mtu 1545,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 
10.8.0.1,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Jan 22 13:07:25 gw openvpn[11958]: Expected Remote Options String: 
'V4,dev-type tun,link-mtu 1545,tun-mtu 1500,proto UDPv4,ifconfig 
10.8.0.1 10.8.0.2,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Jan 22 13:07:25 gw openvpn[11958]: Local Options hash (VER=V4): '4b91e501'
Jan 22 13:07:25 gw openvpn[11958]: Expected Remote Options hash 
(VER=V4): '48593abd'
Jan 22 13:07:25 gw openvpn[11965]: Socket Buffers: R=[112640->131072] 
S=[112640->131072]
Jan 22 13:07:25 gw openvpn[11965]: UDPv4 link local (bound): [undef]
Jan 22 13:07:25 gw openvpn[11965]: UDPv4 link remote: 
[AF_INET]212.59.24.10:1194

kitame gale:

Jan 22 13:13:08 cd openvpn[31829]: LZO compression initialized
Jan 22 13:13:08 cd openvpn[31829]: TUN/TAP device tun0 opened
Jan 22 13:13:08 cd openvpn[31829]: /sbin/ifconfig tun0 10.8.0.2 
pointopoint 10.8.0.1 mtu 1500
Jan 22 13:13:08 cd openvpn[31834]: UDPv4 link local (bound): [undef]
Jan 22 13:13:08 cd openvpn[31834]: UDPv4 link remote: [undef]


Kodėl?
/proc/sys/net/ipv4/ip_forward - 1

mano iplentos INPUT, FORWARD, OUTPUT -j ACCEPT

gali būt kad pakeliui yra firewall'as, į kažkurią pusę blokuojantis VPN'ą?

-- 
  ejs
3Dastronomyagricultureaudioautosautos.audiautos.audioautos.binariesautos.bmwautos.clubautos.fordautos.hondacrxautos.japanautos.mercedesautos.opelautos.sportautos.volvoautos.vwaviaavia.binariesbankcardsbinariesbooksbuildingcinemacommercecomp.hardwarecomp.softwarecomp.lietuvinimascomp.networksculturedarbas.ieskaudarbas.siulaudesigneconomicselectronicsfaunafauna.aquafauna.binariesfishingflorafotofoto.binariesgamesgames.csgames.onlinegsmgurmanaihumourhumour.binariesinternetlawmicrosoftmotomusicmusic.binariesmusic.instrumentsmusic.LT.binariesnavigacijaphppoliticsprogrammingrpgsportstudyingsveikatatalktesttranslationtransportationtraveltravel.binariestvunixvideovideo.binarieswatersportswwwwww.flashpdaautos.supermama.ltmobiledarbasretro.3Dretro.agricultureretro.astronomyretro.audioretro.autosretro.autos.audiretro.autos.audioretro.autos.binariesretro.autos.bmwretro.autos.clubretro.autos.fordretro.autos.hondacrxretro.autos.japanretro.autos.mercedesretro.autos.opelretro.autos.sportretro.autos.supermamaretro.autos.supermama.ltretro.autos.volvoretro.autos.vwretro.aviaretro.avia.binariesretro.bankcardsretro.beosretro.binariesretro.booksretro.buildingretro.cinemaretro.commerceretro.compretro.comp.hardwareretro.comp.lietuvinimasretro.comp.networksretro.comp.softwareretro.cultureretro.darbasretro.darbas.ieskauretro.darbas.siulauretro.designretro.economicsretro.electronicsretro.e-vejasretro.faunaretro.fauna.aquaretro.fauna.binariesretro.fishingretro.floraretro.fotoretro.foto.binariesretro.gamesretro.games.csretro.games.onlineretro.games.rpgretro.genealogijaretro.gsmretro.gurmanairetro.humourretro.humour.binariesretro.internetretro.YZFretro.YZF.nebukretro.YZF.nebuk.netikintisretro.YZF.nebuk.netikintis.bukretro.YZF.nebuk.netikintis.buk.tikintisretro.lawretro.microsoftretro.mobileretro.motoretro.musicretro.music.binariesretro.music.instrumentsretro.music.LTretro.music.LT.binariesretro.navigacijaretro.newsretro.news.taisyklesretro.newuserretro.pdaretro.phpretro.politicsretro.programmingretro.rpgretro.sportretro.studyingretro.sveikataretro.talkretro.translationretro.transportationretro.travelretro.travel.binariesretro.tvretro.unixretro.videoretro.video.binariesretro.watersportsretro.wwwretro.www.flashdiylt.rkm.news.announcelt.rkm.news.newuser