Andrew,
if so, then a lot of things have changed in comparison to SME7.0 and the openvpn software which I installed in january '07 (the most recent version
of openvpn the time being - unfortunenately I do not remember the exact version): at that time I installed SME7.0, installed the openvpn contrib - configuered openvpn on my XP client (certificates & keys) and everthing worked fine from scratch.
Do you really mean that "today" I have to create firewall rules for the UDP-Port 1194??? I haven't found any hints in this context on the "HowTo's install smeserver-openvpn-bridge" as of the 28th of february 07 fm http://sme.firewall-services.com !!!!
Any comments are highly appreciated... 
gerd
Hmm. I can't really find anything in the how to on that per say.. but it's just basic networking. More and more, Firewalls are starting to take the approach that BSD did years ago: close everything, and only open what you're specifically told to. In the various security updates to SME, it wouldn't surprise me if that was the case. It never hurts to try and see if that is the case.
As for the TLS case..one thing to look at, that I've discovered in my workings... check the filesize of the certificates. A couple of times, I've run into it where the certs are generated...but they're just not big enough. they should be in the neighbourhood of about 4k per... if they're not.. delete all keys, generate a new DH key, and start over. Safest way, and then try again.
Your subnetting is ok.. now.. your remote client... does it share the same DSL connection? So it's a subnet within a subnet? Multiple Nats can always be somewhat tricky. Not impossible mind you, but tricky.
Finally.. in my own case, in order to get it working in the office here, I had to roll back to 7.1 and disable updates with OVPN 1.1...as the updates would break my OVPN connection. My server is in server-only mode, partly because I prefer to separate server roles, and also because I didn't need another firewall to administer in the office. (I'm the network admin).
One last thing to check: on your SME server.. check the logs to see if the connection traffic is even hitting the SME box or not. See if there is a request coming from anywhere.. the client logs won't tell you that information, but your openvpn logs will. If you can, try connecting from an external network, not just a different subnet. When I was testing mine... I used RDP to connect to my home network, and would try and connect from there. made for a field test without the hassle of leaving my desk.
Hope this helps.
321 Replies
131891 Views