OPENVPN & MACOS - some issues

5 posts / 0 new
Last post
Philsi
Philsi's picture
OPENVPN & MACOS - some issues

Hello toghether,

 

I'm using the DD-WRT Firmware 'DD-WRT v24-sp2 (06/06/14) kongac' with my Netgear Nighthawk R7000.

I have one issue with OPENVPN. As client I'm using Tunnelblick 3.3.4 (build 3518.3872) on MACOSX. But also a test with an Windows GUI show the same issue.

 

What's my problem:

I'm using the Config in FW as an 'Daemon' and filled out CA Cert, Public Server Cert, Private Server Key, DH PEM and Additional Config. VPN connection can be established without a problem. My problem is, that I would use the WAN IP from my Netgear router and not WAN IP of provider where I established the connection to VPN server. Background: If I'm outside my country I would like to use my home country IP adress to use some streaming services restricted on my home IP adress only.

I tried some line in server config:

  1. push "route redirect-gateway"
  2. push "route 192.168.0.1 255.255.255.0"

Both configs have same result, no WAN IP from home router by checking 'http://www.myip.is'

Also on client side there is a check-box for 'Pushing whole network traffic over VPN server' The result, if I'm checkng this box is, that no internet side is reachable any more. I also used to ping 8.8.8.8, also not work. So no DNS issue.

I assume it's more a routing issue. Maybe someone can help?

See my server config:

port 1194
proto udp
dev tun0
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
dh /tmp/openvpn/dh.pem
server 172.16.2.0 255.255.255.0
push "route redirect-gateway"
push "dhcp-options DNS 192.168.0.1"
keepalive 10 120
comp-lzo
persist-key
persist-tun
verb 3

See my firewall commands:
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I INPUT 3 -i tun0 -j ACCEPT
iptables -I FORWARD 3 -i tun0 -o tun0 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
DonPhillipe
DonPhillipe's picture
Try this on dd-wrt:
DonPhillipe
DonPhillipe's picture
Try this when you configure
DonPhillipe
DonPhillipe's picture
Try this on dd-wrt:
DonPhillipe
DonPhillipe's picture
Try this when you configure