Использую VPS(debian 6)для openvpn.
В логе сервера куча таких записей, после подключения клиента
---------------------------------------------
Sun Oct 21 21:24:50 2012 us=435824 phone/some_wan_ip:35962 MULTI: bad source address from client [192.168.1.107], packet dropped
Sun Oct 21 21:24:50 2012 us=720867 phone/some_wan_ip:35962 MULTI: bad source address from client [192.168.1.107], packet dropped
Sun Oct 21 21:24:51 2012 us=382626 phone/some_wan_ip:35962 MULTI: bad source address from client [192.168.1.107], packet dropped
---------------------------------------------
server.conf
---------------------------------------------
port 11944
proto tcp
dev tun
ca data/ca.crt
cert data/server.crt
key data/server.key
dh data/dh1024.pem
tls-server
tls-auth data/ta.key 0
remote-cert-tls client
cipher AES-256-CBC
server 10.10.10.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push «redirect-gateway def1 bypass-dhcp»
push «dhcp-option DNS 8.8.8.8»
push «dhcp-option DNS 8.8.4.4»
client-to-client
client-config-dir ccd
keepalive 10 120
comp-lzo
persist-key
persist-tun
max-clients 5
status /var/log/status-openvpn.log
log /var/log/openvpn.log
verb 4
auth-user-pass-verify /etc/openvpn/verify.sh via-file
username-as-common-name
tmp-dir /tmp
script-security 2
---------------------------------------------
на сервере iptables -L -n
---------------------------------------------
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all — 10.10.10.0/24 0.0.0.0/0
ACCEPT all — 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
---------------------------------------------
client.conf
---------------------------------------------
remote xxx 11944
client
dev tun
ping 10
comp-lzo
proto tcp
tls-client
tls-auth data/ta.key 1
pkcs12 data/vpn.laptop.p12
remote-cert-tls server
persist-key
persist-tun
cipher AES-256-CBC
verb 3
pull
auth-user-pass /home/pollux/.openvpn/users.db #«user\n pass»
---------------------------------------------
Подскажите куда копать? или почему возникает данная проблема.
Нашел:
---------------------------------------------
How to fix the errors «MULTI: bad source address from client [192.168.100.249], packet dropped» or «GET INST BY VIRT: 192.168.100.249 [failed]»?
These errors occur because OpenVPN doesn't have an internal route for 192.168.100.249. Consequently, it doesn't know how to route the packet to this machine, so it drops the packet.
Use client-config-dir and create a ccd file for your client containing the iroute option to tell OpenVPN that the 192.168.100.0/24 network is available behind this client.
---------------------------------------------
Не помогло.
