DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD Security

OpenBSD Security Functionally paranoid!

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1   (View Single Post)  
Old 10th September 2015
Peter_APIIT Peter_APIIT is offline
Shell Scout
 
Join Date: Jun 2008
Posts: 121
Default OpenVPN No Route To Host

Dear All,

I had tried to configure my gateway using openvpn connection but there is no route to host when ping the dns server.

Quote:
Internet:
Destination Gateway Flags Refs Use Mtu Prio Iface
0/1 10.9.1.121 UGS 0 64 - 8 tun1
default 60.53.43.254 UGS 5 128650 - 8 pppoe0
10.9.0.1/32 10.9.1.121 UGS 0 0 - 8 tun1
10.9.1.121 10.9.1.122 UH 3 0 - 4 tun1
10.9.1.122 10.9.1.122 UHl 0 0 - 1 lo0
60.53.42.149 60.53.42.149 UHl 0 0 - 1 lo0
60.53.43.254 60.53.42.149 UH 1 0 - 4 pppoe0
loopback localhost UGRS 0 0 32768 8 lo0
localhost localhost UHl 3 7035 32768 1 lo0
128/1 10.9.1.121 UGS 0 200 - 8 tun1
172.16.1/24 link#1 C 0 0 - 4 vr0
172.16.1.1 00:0d:88:17:bf:49 HLl 2 47384 - 1 lo0
172.16.1.255 link#1 HLb 0 0 - 1 vr0
178.162.193.233/32 60.53.43.254 UGS 0 0 - 8 pppoe0
BASE-ADDRESS.MCAST localhost URS 0 0 32768 8 lo0
May I know what wrong with it?
Should i edit the packet filter firewall?

By the way, this is my current pf configuration.
Quote:
################################################## #################################
match on pppoe0 scrub (reassemble tcp,random-id,no-df,max-mss 1440,min-ttl 64)
match out on pppoe0 inet from !(egress:network) to any nat-to (pppoe:0)

antispoof log for {$ext_if,$int_if}

block drop log

pass out on {pppoe0,$ext_if,$int_if} inet proto tcp modulate state
pass out on {pppoe0,$ext_if,$int_if} inet proto udp keep state
pass out on {pppoe0,$ext_if,$int_if} inet proto icmp all icmp-type echoreq keep state

# No Proxy #############

#Allow internal lan enter gateway
pass in log on $int_if inet proto tcp from any to any port $tcp modulate state (max 40,source-track rule,max-s
rc-nodes 40,max-src-states 40,max-src-conn 30,max-src-conn-rate 20/20)

pass in log on $int_if proto udp from any to any port $udp keep state (max 40, source-track rule,max-src-nodes
40,max-src-states 40,max-src-conn 30,max-src-conn-rate 20/20)

Please enlighten on this.
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Route to enc0 WeakSauceIII OpenBSD Security 11 1st June 2015 07:40 PM
No Route to Host rtwingfield FreeBSD Installation and Upgrading 9 25th May 2015 03:05 AM
route on openbsd hpabsdbeginner1 OpenBSD General 2 15th April 2014 07:17 PM
Openvpn pf/nat/route-to issue lasstoff OpenBSD Security 3 16th January 2012 12:28 PM
ping: sendto: No route to host joostvgh OpenBSD General 2 29th April 2010 12:34 PM


All times are GMT. The time now is 10:57 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick