Page 1 of 1

[SOLVED] OpenVPN failed Mageia 3

PostPosted: May 28th, '13, 23:07
by emel_punk
EHLO !!!

i've installed mageia 3. I' ve been using Mandrake since 8.1 and then Mandriva and i tried to migrate to Mageia 2 unsuccessfully a while ago. Basically because i configure my openvpn and it just didn't work, the same happens with mageia 3, let me tell you how i did the configuratioin.

my gateway: 2x1.2xx.8x.1xx
a user certified:
a CA certified:
a private key
i use LZO data compression and tcp port 1194.

then i connect. this is my route table
Code: Select all
[root@localhost eqeeqw]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.124.1   0.0.0.0         UG    0      0        0 eth0
10.16.0.0       10.16.0.13      255.255.0.0     UG    0      0        0 tun0
10.16.0.13      0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.124.0   0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.126.0   10.16.0.13      255.255.255.0   UG    0      0        0 tun0
2x1.2xx.8x.1x   192.168.124.1   255.255.255.255 UGH   0      0        0 eth0


and when i ping this is the result of:
Code: Select all
[root@localhost eqeeqw]# ping
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
From 10.16.0.14 icmp_seq=1 Destination Host Unreachable
^CFrom 10.16.0.14 icmp_seq=1 Destination Host Unreachable


My interface are:
Code: Select all
[root@localhost eqweqw]# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:26:22:26:39:8a brd ff:ff:ff:ff:ff:ff
    inet 192.168.124.106/24 brd 192.168.124.255 scope global eth0
    inet6 fe80::226:22ff:fe26:398a/64 scope link
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:26:5c:a0:de:fb brd ff:ff:ff:ff:ff:ff
    inet6 fe80::226:5cff:fea0:defb/64 scope link
       valid_lft forever preferred_lft forever
7: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
    link/none
    inet 10.16.0.14 peer 10.16.0.13/32 brd 10.16.0.14 scope global tun0


I also got nothing with my tcpdump ICMP proto when i do ping and i did my last attempt to resolve the problem before post here, which was to install openvpn from source and failed too. I then installed in a virtualized mandriva 2011 and the vpn went smooth just like allways.

So any help?? :ugeek:

Re: OpenVPN failed Mageia 3

PostPosted: May 29th, '13, 15:11
by wintpe
is the firewall allowing outgoing port 1194?

is there a firewall rule for tun0

iptables -L should show something like, im cut out lots of irelivent stuff to make it readable.
Code: Select all
Chain tun0_fwd (1 references)
target     prot opt source               destination
sfilter    all  --  anywhere             anywhere            [goto]
dynamic    all  --  anywhere             anywhere             ctstate INVALID,NEW
net_frwd   all  --  anywhere             anywhere



Chain tun0_fwd (1 references)
target     prot opt source               destination
sfilter    all  --  anywhere             anywhere            [goto]
dynamic    all  --  anywhere             anywhere             ctstate INVALID,NEW
net_frwd   all  --  anywhere             anywhere




check with the firewall that it includes tun0 in the list of devices.

mageia 2 openvpn does work, its working on my laptop right now

looks to me like everything is working on your system but the ping to the destination network, and that is most
likly the firewall
Code: Select all

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 
          inet addr:10.8.0.6  P-t-P:10.8.0.5  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:17654 errors:0 dropped:0 overruns:0 frame:0
          TX packets:17857 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:20617967 (19.6 MiB)  TX bytes:1138467 (1.0 MiB)

root@localhost ~]# ping 10.8.0.6
PING 10.8.0.6 (10.8.0.6) 56(84) bytes of data.
64 bytes from 10.8.0.6: icmp_req=1 ttl=64 time=0.104 ms
64 bytes from 10.8.0.6: icmp_req=2 ttl=64 time=0.084 ms
64 bytes from 10.8.0.6: icmp_req=3 ttl=64 time=0.062 ms
^C




regards peter

Re: OpenVPN failed Mageia 3

PostPosted: May 29th, '13, 19:19
by Latte
Is it possible that is related to the firewall?

maybe you will take a look to this viewtopic.php?f=8&t=4987&p=34859&hilit=iptables#p34871?
Here is another link to the Errata: https://wiki.mageia.org/en/Mageia_3_Err ... ll6_config

Re: OpenVPN failed Mageia 3

PostPosted: May 29th, '13, 20:48
by emel_punk
Well... actually i disable my firewall, but it looks like he didn't. its kinda confusing... Mageia remove almost all the standard stuffs like "/var/log/messages" or "chkconfig ipables off" or "/etc/rc.local" ....

Re: OpenVPN failed Mageia 3

PostPosted: May 29th, '13, 23:47
by emel_punk
Well it worked, it was the firewall thing. I got another question, where is "rc.local" and /var/log/messages ??

Re: OpenVPN failed Mageia 3

PostPosted: May 30th, '13, 08:10
by isadora
Good to read your problem got solved emel_punk.

Will you please mark the topic accordingly?
You can do so, by editing the subject/title of the first message in this topic.
Place [SOLVED] in front of subject/title, and you are done! ;)

Another advise: please use for every other subject an unique topic!

Have magical times around!!!! :)

Re: OpenVPN failed Mageia 3

PostPosted: Jun 1st, '13, 19:39
by doktor5000
emel_punk wrote:I got another question, where is "rc.local" and /var/log/messages ??

For the first, please use the search function, was discussed recently quite often, and for the second, have a look for "journalctl" - was also discussed quite often in the last few months.