From owner-freebsd-stable@FreeBSD.ORG Fri Sep 22 14:52:15 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CDE5B16A40F for ; Fri, 22 Sep 2006 14:52:15 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [64.7.153.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6364943D5C for ; Fri, 22 Sep 2006 14:52:14 +0000 (GMT) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by smarthost1.sentex.ca (8.13.6/8.13.6) with ESMTP id k8MEqCII072347; Fri, 22 Sep 2006 10:52:13 -0400 (EDT) (envelope-from mike@sentex.net) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.13.6/8.13.3) with ESMTP id k8MEqCI8012988 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 22 Sep 2006 10:52:12 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <7.0.1.0.0.20060922104900.16aceb00@sentex.net> X-Mailer: QUALCOMM Windows Eudora Version 7.0.1.0 Date: Fri, 22 Sep 2006 10:52:17 -0400 To: =?iso-8859-1?Q?V=C3=A1clav?= Haisman From: Mike Tancsa In-Reply-To: <4513F1B7.9010505@sh.cvut.cz> References: <4513D9F7.4050606@sh.cvut.cz> <4513F1B7.9010505@sh.cvut.cz> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: ClamAV version 0.88.3, clamav-milter version 0.88.3 on clamscanner2 X-Virus-Status: Clean Cc: freebsd-stable@freebsd.org Subject: Re: Problems with OpenVPN+routing and creating tun0 interface X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Sep 2006 14:52:15 -0000 At 10:22 AM 9/22/2006, V=C3=A1clav Haisman wrote: > > >The problme was on the server, it had my address restricted in firewall. > >I managed to make the tunnel. And I could ping the 192.168.23.1 address >from mine 192.168.23.4. I had to restart the serivce because I did some >changes to the OpenVPN client configuraton. Now I cannot ping again. But >according to tcpdump the connection is there. And I cannot even ping >mine 192.168.23.4. Missing routes or someting, after I restarted the= serice? Perhaps a better question to ask on the openvpn=20 mailling list. But provide more details as to your config. One FreeBSD tip with openvpn that I find helpful=20 is to specify which tun device to use--=20 especially if you have other tun users like ppp=20 or pppoe, is to create a specific interface and tell openvpn to use it. On my boxes I do the following prior to starting up openvpn cat /dev/null > /dev/tun101 and in openvpn, I tell it to use dev tun101 ---Mike=20