Author Topic: Cannot access internet over vpn  (Read 7936 times)

alexz

  • Zen Apprentice
  • *
  • Posts: 15
  • Karma: +0/-0
    • View Profile
Re: Cannot access internet over vpn
« Reply #15 on: October 28, 2010, 11:28:42 pm »
come on guyzzz, help uzzz!!!

pstanbra

  • Zen Apprentice
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
    • IT Support Contract
Re: Cannot access internet over vpn
« Reply #16 on: November 26, 2010, 10:13:24 am »
really need some help with this

durom

  • Zen Apprentice
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: Cannot access internet over next router and LAN
« Reply #17 on: December 10, 2010, 11:36:13 pm »
Similar problem, but with sending DNS query through router..... below Gateway....

FTTH HAG --- ZENTYAL as GW --- LAN1 --- Router --- LAN2

I can ping everything from LAN2 up to Internet but only if I know IP address , when I want to ping or connect to Internet by URL.... DNS is not resolving. DNS query from LAN1 is working OK I can use URL.... but when I go from LAN2 through Router LAN1 to ZENTYAL_GW DNS server dont communicate with my machine....

Thanks DuroM

Josep

  • Zen Samurai
  • ****
  • Posts: 255
  • Karma: +6/-0
    • View Profile
Re: Cannot access internet over vpn
« Reply #18 on: December 11, 2010, 12:57:16 pm »
I have a working VPN server. My only problem with it had to do with DNS.
On my ebox, I added the DNS functionality, where the first DNS is 127.0.0.1 (at the very least, it will be a caching nameserver), the second one is 192.168.1.1 (my router) and the last one is 4.4.4.4 (Google nameserver, should something go terribly wrong).
Enable the DNS, configure it and check that it works locally.

Then I created a script named /etc/ebox/hooks/openvpn.postsetconf:
Code: [Select]
#!/bin/sh
host=`hostname -s`
host="/etc/openvpn/$host.conf"
echo "# Added by /etc/ebox/hooks/openvpn.postsetconf" >> $host
echo 'push "dhcp-option DOMAIN <my domain>"' >> $host
echo 'push "dhcp-option DNS 192.168.1.5"' >> $host
192.168.1.5 is the IP of my ebox.

With this setup, my Windows machines recognize my ebox as a DNS server and can actually behave as if they were local.

Not saying that this will solve your problem immediately, but since you seem to be stuck, I hope to help you get the things moving: (1) install DNS, (2) configure DNS properly, (3) make sure your clients receive those configurations properly.
Your client shouldn't see your LAN IPs, because it is on a different subnet.
Simplify your current setup, and you will simplify your problem.
 

durom

  • Zen Apprentice
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: Cannot access internet over vpn
« Reply #19 on: December 13, 2010, 02:00:34 pm »
OK I can route traffic to Internet throught Zentyal GW, but I can not obtain DNS resolve from other subnet LAN2 e.g. If I know IP I can go behind Zentyal GW from this LAN2 - no problem. If I am at first subnet LAN1 DNS requests are solved by DNS Cache ... no problem, but problem is If I am in LAN2... routing between networks are OK... I can mamage Zentyal no problem... I have 127.0.0.1 like first one in DNS list ... other three are next one in list ....

problem looks like Firewall related.. other subnet DNS request is not alloved but I put here any to any or DNS for any ... and nothing changed...

Thanks DuroM

durom

  • Zen Apprentice
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: Cannot access internet over vpn
« Reply #20 on: December 13, 2010, 02:06:10 pm »
Sorry, one more Infos...

if I use DNS caching server offered by FTTH HAG it works well.... but why to use server above my own Zentyal... why DNS request from LAN2 subnet go throught Zentyal by it is not solved by it...
I try to cofigure it like internal service in services table but problem persist... nothing changed...

DuroM