Update with partial resolution below.

----- Original Message ----- 
From: "Mathias Jeschke" <openvpn-us...@0xaffe.de>
To: <openvpn-users@lists.sourceforge.net>
Cc: "Jeff Boyce" <jbo...@meridianenv.com>
Sent: Thursday, November 13, 2014 12:54 AM
Subject: Re: [Openvpn-users] Classic case of can't reach machine behind 
OpenVPN server from the connected client


> Hi Jeff,
>
> On 11/12/2014 06:53 PM, Jeff Boyce wrote:
>
>> Routing info as requested, listed below.
>
> [...]
>
>> Routing table of Vista Box behind OpenVPN Server
>
> [...]
>
>> ===========================================================================
>>
>> Persistent Routes:
>>
>>    Network Address          Netmask  Gateway Address  Metric
>>
>>           10.4.0.0    255.255.255.0         10.4.0.1       1
>>
>>            0.0.0.0          0.0.0.0    192.168.123.2  Default
>>
>> ===========================================================================
>
> Why are you having routes for 10.4.0.0/24 on the Vista box behind the 
> router? (Especially via a gateway that is not directly reachable by that 
> machine?)
>
> At the moment the network 10.4.0.0/24 is unreachable for the Vista box!
>
> I guess once you have removed the first persistent rule it will work.
>
> HTH,
> Mathias.
>

I had put that static route in the Vista Box as a test one evening, and 
apparently forgot to take it out.  I have removed it now.  After removing 
it, a ping test would return that it Timed-Out rather than Destination Host 
Unreachable.

I was able to get someone that I could step through some configuration 
changes for me at the far end today so I ran a few more tests.  I had them 
turn my Vista Box firewall off, and the result was that the ping test 
succeeded.  After that I had them turn on Wireshark and I ran the ping test 
again to capture the packets.  Now I can take a look at the results later 
tonight and determine exactly what changes I need to make in the Vista 
firewall to maintain the VPN connection without opening up the Vista box to 
the whole world (well not exactly, since the OpenWRT box is running a 
firewall at my gateway).

Thanks for the help everyone.

Jeff


------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to