[SOLVED] OpenVPN failed Mageia 3

[emel_punk]

EHLO !!!

i've installed mageia 3. I' ve been using Mandrake since 8.1 and then Mandriva and i tried to migrate to Mageia 2 unsuccessfully a while ago. Basically because i configure my openvpn and it just didn't work, the same happens with mageia 3, let me tell you how i did the configuratioin.

my gateway: 2x1.2xx.8x.1xx
a user certified:
a CA certified:
a private key
i use LZO data compression and tcp port 1194.

then i connect. this is my route table

Code: Select all

[root@localhost eqeeqw]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.124.1   0.0.0.0         UG    0      0        0 eth0
10.16.0.0       10.16.0.13      255.255.0.0     UG    0      0        0 tun0
10.16.0.13      0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.124.0   0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.126.0   10.16.0.13      255.255.255.0   UG    0      0        0 tun0
2x1.2xx.8x.1x   192.168.124.1   255.255.255.255 UGH   0      0        0 eth0

and when i ping this is the result of:

Code: Select all

[root@localhost eqeeqw]# ping
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
^CFrom 10.16.0.14 icmp_seq=1 Destination Host Unreachable

My interface are:

Code: Select all

[root@localhost eqweqw]# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:26:22:26:39:8a brd ff:ff:ff:ff:ff:ff
    inet 192.168.124.106/24 brd 192.168.124.255 scope global eth0
    inet6 fe80::226:22ff:fe26:398a/64 scope link
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:26:5c:a0:de:fb brd ff:ff:ff:ff:ff:ff
    inet6 fe80::226:5cff:fea0:defb/64 scope link
       valid_lft forever preferred_lft forever
7: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
    link/none
    inet 10.16.0.14 peer 10.16.0.13/32 brd 10.16.0.14 scope global tun0

I also got nothing with my tcpdump ICMP proto when i do ping and i did my last attempt to resolve the problem before post here, which was to install openvpn from source and failed too. I then installed in a virtualized mandriva 2011 and the vpn went smooth just like allways.

So any help??

[wintpe]

is the firewall allowing outgoing port 1194?

is there a firewall rule for tun0

iptables -L should show something like, im cut out lots of irelivent stuff to make it readable.

Code: Select all

Chain tun0_fwd (1 references)
target     prot opt source               destination
sfilter    all  --  anywhere             anywhere            [goto]
dynamic    all  --  anywhere             anywhere             ctstate INVALID,NEW
net_frwd   all  --  anywhere             anywhere



Chain tun0_fwd (1 references)
target     prot opt source               destination
sfilter    all  --  anywhere             anywhere            [goto]
dynamic    all  --  anywhere             anywhere             ctstate INVALID,NEW
net_frwd   all  --  anywhere             anywhere



check with the firewall that it includes tun0 in the list of devices.

mageia 2 openvpn does work, its working on my laptop right now

looks to me like everything is working on your system but the ping to the destination network, and that is most
likly the firewall

Code: Select all


tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 
          inet addr:10.8.0.6  P-t-P:10.8.0.5  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:17654 errors:0 dropped:0 overruns:0 frame:0
          TX packets:17857 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:20617967 (19.6 MiB)  TX bytes:1138467 (1.0 MiB)

root@localhost ~]# ping 10.8.0.6
PING 10.8.0.6 (10.8.0.6) 56(84) bytes of data.
64 bytes from 10.8.0.6: icmp_req=1 ttl=64 time=0.104 ms
64 bytes from 10.8.0.6: icmp_req=2 ttl=64 time=0.084 ms
64 bytes from 10.8.0.6: icmp_req=3 ttl=64 time=0.062 ms
^C


regards peter

[Latte]

Is it possible that is related to the firewall?

maybe you will take a look to this viewtopic.php?f=8&t=4987&p=34859&hilit=iptables#p34871?
Here is another link to the Errata: https://wiki.mageia.org/en/Mageia_3_Err ... ll6_config

[emel_punk]

Well... actually i disable my firewall, but it looks like he didn't. its kinda confusing... Mageia remove almost all the standard stuffs like "/var/log/messages" or "chkconfig ipables off" or "/etc/rc.local" ....

[emel_punk]

Well it worked, it was the firewall thing. I got another question, where is "rc.local" and /var/log/messages ??

[isadora]

Good to read your problem got solved emel_punk.

Will you please mark the topic accordingly?
You can do so, by editing the subject/title of the first message in this topic.
Place [SOLVED] in front of subject/title, and you are done!

Another advise: please use for every other subject an unique topic!

Have magical times around!!!!

[doktor5000]

I got another question, where is "rc.local" and /var/log/messages ??

For the first, please use the search function, was discussed recently quite often, and for the second, have a look for "journalctl" - was also discussed quite often in the last few months.