Changes between Version 1 and Version 2 of 255-qconnection-initiated-with-xxxxq-but-i-cannot-ping-the-server-through-the-vpn


Ignore:
Timestamp:
03/27/17 09:15:49 (7 years ago)
Author:
Samuli Seppänen
Comment:

Fix broken links reported by mpfrench

Legend:

Unmodified
Added
Removed
Modified

  • 255-qconnection-initiated-with-xxxxq-but-i-cannot-ping-the-server-through-the-vpn

    v1 v2  
    88</blockquote>
    99<p>On Windows XP, the firewall can be accessed by Control Panel -> Security Center -> Windows Firewall -> Advanced. In the Network Connection Settings control, uncheck the box corresponding to the TAP-Win32 adapter.</p>
    10 <p>Note that if you want OpenVPN clients to be able access other machines on the LAN, it is not enough to merely disable firewalling on the TUN/TAP adapter. You must also enable <a href="/index.php/open-source/faq.html#ip-forward">IP forwarding</a> and set up a return route from the LAN gateway to the OpenVPN server. This is discussed at length in the <a href="/index.php/open-source/documentation/howto.html#scope">HOWTO</a>.</p>
     10<p>Note that if you want OpenVPN clients to be able access other machines on the LAN, it is not enough to merely disable firewalling on the TUN/TAP adapter. You must also enable <a href="https://community.openvpn.net/openvpn/wiki/265-how-do-i-enable-ip-forwarding">IP forwarding</a> and set up a return route from the LAN gateway to the OpenVPN server. This is discussed at length in the <a href="https://community.openvpn.net/openvpn/wiki/HOWTO">HOWTO</a>.</p>
    1111<p>Also note that firewalling the TUN/TAP interface is a completely separate operation from firewalling the internet-facing interface. For example, suppose an OpenVPN client is sending email via SMTP over the OpenVPN tunnel. The OpenVPN server firewall will need to allow both incoming encrypted data on TCP/UDP port 1194 via the internet-facing interface as well as incoming SMTP connections via the TUN/TAP interface.</p>
    1212}}}