[zealer]

Hello dear experts,

I have OpenVPN-2.2.1 configured on two OpenBSD 4.9
I am able to ping: client -> server and all networks behind
I am not able to ping: server -> client at all

I already checked my FW, you can see the configuration below.
Ping works with pf and OpenVPN stopped. (OK)
Ping does not work with pf enabled and openVPN stopped. (OK)
Ping works in only one direction with pf and OpenVPN enabled (NOT OK)

And a small question: why is there one tunnel from the client's point of view (10.0.1.6 -> 10.0.1.5), but from the server's point of view - there is a different tunnel (10.0.1.1 -> 10.0.1.2)? What am I missing here? In my understanding, there should be only one tunnel (for example 10.0.1.0/30, with .0 being the net, .1 server, .2 the client and .3 the broadcast).


Please help me figure that out... i have a feeling it is something really simple, but I dont know where to go from here...
Uploaded are screenshots with my setup (it wont allow me to post the links, so please remove the leading zero and copy-paste the addresses. Thanks! ):

The simple topology:
0http://img651.imageshack.us/img651/7789/topologyg.png

Firewall setup:
0http://img41.imageshack.us/img41/3781/66277080.png

OpenVPN configurations:
0http://img827.imageshack.us/img827/8523/confg.png

Interface IPs + routing tables:
0http://img842.imageshack.us/img842/6941/ifconfigiproutes.png

Ping from client to server succeeds:
0http://img828.imageshack.us/img828/5552/pingclientserver.png

Ping from server to client fails:
0http://img196.imageshack.us/img196/3708/pingserverclient.png

I am also uploading the OpenVPN logs (verb=6). The successful ping (client->server, 5 packets) was initiated exactly at 21:29:30 and the 'unsuccessful' ping (server->client, 6 packets) was initiated at 21:29:45
OpenVPN Server-side log:
link #1 (w/ 10 sec timer): 0http://www.yourfilelink.com/get.php?fid=714560
link #2 (local file share server): 0http://dox.bg/files/dw?a=5535558a24

OpenVPN Client-side log:
link #1 (w/ 10 sec timer): 0http://www.yourfilelink.com/get.php?fid=714563
link #2 (local file share server): 0http://dox.bg/files/dw?a=2b17aa9164

I hope I havent missed any important information... one thing worth noting is the "openvpn: writing to routing socket: Protocol not supported" during OpenVPN startup on the server...


Thank you VERY much in advance for your help, it is greatly appreciated!
Kind regards,
Simeonf