VPN Connects but no access

skent

I have set up ovpn on 1.2-RC4 following the steps in the stickies in this forum. I can connect the the remote vpn server and get an ip address (192.168.10.21) but if I try to use Remote Desktop to access a Terminal Server over the vpn I get:

network problems caused you to be disconnected from the windows based computer

If I try to ping the LAN interface of pfsense (192.168.1.1) I get:

36 bytes from 10.4.1.1: Communication prohibited by filter
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 9e4f   0 0000  3e  01 5b9f 192.168.0.105  192.168.1.1

Log file if that helps


Thu 02/07/08 11:09 PM: WARNING: file 'daniels.key' is group or others accessible
Thu 02/07/08 11:09 PM: LZO compression initialized
Thu 02/07/08 11:09 PM: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu 02/07/08 11:09 PM: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu 02/07/08 11:09 PM: Local Options String: 'V4
Thu 02/07/08 11:09 PM: Expected Remote Options String: 'V4
Thu 02/07/08 11:09 PM: Local Options hash (VER=V4): '41690919'
Thu 02/07/08 11:09 PM: Expected Remote Options hash (VER=V4): '530fdded'
Thu 02/07/08 11:09 PM: Socket Buffers: R=[42080->65536] S=[9216->65536]
Thu 02/07/08 11:09 PM: UDPv4 link local (bound): [undef]:1194
Thu 02/07/08 11:09 PM: UDPv4 link remote: 151.196.##.###:1194
Thu 02/07/08 11:09 PM: TLS: Initial packet from 151.196.##.###:1194
Thu 02/07/08 11:09 PM: VERIFY OK: depth=1
Thu 02/07/08 11:09 PM: VERIFY OK: nsCertType=SERVER
Thu 02/07/08 11:09 PM: VERIFY OK: depth=0
Thu 02/07/08 11:09 PM: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu 02/07/08 11:09 PM: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu 02/07/08 11:09 PM: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu 02/07/08 11:09 PM: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu 02/07/08 11:09 PM: Control Channel: TLSv1
Thu 02/07/08 11:09 PM: [server] Peer Connection Initiated with 151.196.35.252:1194
Thu 02/07/08 11:09 PM: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu 02/07/08 11:09 PM: PUSH: Received control message: 'PUSH_REPLY
Thu 02/07/08 11:09 PM: OPTIONS IMPORT: timers and/or timeouts modified
Thu 02/07/08 11:09 PM: OPTIONS IMPORT: --ifconfig/up options modified
Thu 02/07/08 11:09 PM: OPTIONS IMPORT: route options modified
Thu 02/07/08 11:09 PM: gw 192.168.0.1
Thu 02/07/08 11:09 PM: TUN/TAP device /dev/tun0 opened
Thu 02/07/08 11:09 PM: /sbin/ifconfig tun0 delete
Thu 02/07/08 11:09 PM: NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Thu 02/07/08 11:09 PM: /sbin/ifconfig tun0 192.168.10.22 192.168.10.21 mtu 1500 netmask 255.255.255.255 up
Thu 02/07/08 11:09 PM: /sbin/route add -net 192.168.10.1 192.168.10.21 255.255.255.255
Thu 02/07/08 11:09 PM: Initialization Sequence Completed

Any ideas?

Thanks

Cry Havok

The log file makes it pretty clear you're not pushing any routes to the client. As such it doesn't know how to get packets anywhere, so it'll never work ;)

I'd guess you either need to add 192.168.1.0/24 to the "Local network" field or add push "redirect-gateway" to the "Custom Options" field.