Openvpn não está funcionando no ubuntu 15.10

Question

Eu tenho um problema ao tentar se conectar ao openvpn no ubuntu 15.10 (32 bits). Eu tenho 15,04 64 bits e para instalar o vpn aberto tudo o que tenho a fazer é executar o comando "sudo apt-get instalar openvpn network-manager-openvpn-gnome" e vender o arquivo de configuração openvpn e funciona bem.

O problema agora é que ele se conecta bem e, quando se conecta, não consigo acessar a internet do firefox. O tempo limite da solicitação de página. Mas quando eu conecto diretamente funciona bem. Aqui está o meu sistema Log.

    Dec  4 07:11:19 user-pc nm-openvpn[3039]: TUN/TAP device tun0 opened
Dec  4 07:11:19 user-pc nm-openvpn[3039]: /usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper --tun -- tun0 1500 1559 10.101.0.6 10.101.0.5 init
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): new Tun device (carrier: OFF, driver: 'tun', ifindex: 9)
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  devices added (path: /sys/devices/virtual/net/tun0, iface: tun0)
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  device added (path: /sys/devices/virtual/net/tun0, iface: tun0): no ifupdown configuration found.
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  VPN connection '11->xxxVPN.com TCP-443' (IP Config Get) reply received.
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  VPN connection '11->xxxVPN.com TCP-443' (IP4 Config Get) reply received.
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  VPN Gateway: 189.102.037.102
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  Tunnel Device: tun0
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  IPv4 configuration:
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Internal Gateway: 10.101.0.5
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Internal Address: 10.101.0.6
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Internal Prefix: 32
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Internal Point-to-Point Address: 10.101.0.5
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Maximum Segment Size (MSS): 0
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Static Route: 10.101.0.0/16   Next Hop: 10.101.0.5
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Static Route: 10.101.0.1/32   Next Hop: 10.101.0.5
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Forbid Default Route: no
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    Internal DNS: 10.101.0.1
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>    DNS Domain: '(none)'
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  No IPv6 configuration
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  VPN plugin state changed: started (4)
Dec  4 07:11:19 user-pc nm-openvpn[3039]: Initialization Sequence Completed
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  VPN connection '11->xxxVPN.com TCP-443' (IP Config Get) complete.
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): link connected
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  NetworkManager state is now CONNECTED_LOCAL
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  NetworkManager state is now CONNECTED_GLOBAL
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  Writing DNS information to /sbin/resolvconf
Dec  4 07:11:19 user-pc dnsmasq[2010]: setting upstream servers from DBus
Dec  4 07:11:19 user-pc dnsmasq[2010]: using nameserver 10.101.0.1#53
Dec  4 07:11:19 user-pc dbus[791]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service'
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  keyfile: add connection in-memory (10173ed3-3e98-4fe0-9742-a8f2a9980adc,"tun0")
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: unmanaged -> unavailable (reason 'connection-assumed') [10 20 41]
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: unavailable -> disconnected (reason 'connection-assumed') [20 30 41]
Dec  4 07:11:19 user-pc systemd[1]: Starting Network Manager Script Dispatcher Service...
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  Device 'tun0' has no connection; scheduling activate_check in 0 seconds.
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): Activation: starting connection 'tun0' (10173ed3-3e98-4fe0-9742-a8f2a9980adc)
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: disconnected -> prepare (reason 'none') [30 40 0]
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: prepare -> config (reason 'none') [40 50 0]
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: config -> ip-config (reason 'none') [50 70 0]
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: ip-config -> ip-check (reason 'none') [70 80 0]
Dec  4 07:11:19 user-pc dbus[791]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher'
Dec  4 07:11:19 user-pc systemd[1]: Started Network Manager Script Dispatcher Service.
Dec  4 07:11:19 user-pc nm-dispatcher: Dispatching action 'vpn-up' for tun0
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: ip-check -> secondaries (reason 'none') [80 90 0]
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  (tun0): device state change: secondaries -> activated (reason 'none') [90 100 0]
Dec  4 07:11:19 user-pc gnome-session[1409]: ** (nm-connection-editor:3002): WARNING **: Unsupported connection type 'generic'
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  NetworkManager state is now CONNECTED_LOCAL
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  NetworkManager state is now CONNECTED_GLOBAL
Dec  4 07:11:19 user-pc NetworkManager[821]: <info>  Policy set 'tun0' (tun0) as default for IPv4 routing and DNS.

Estas são as regras do iptables:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         


Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         


Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Como você pode ver, está vazio, isso é normal e, se estiver vazio, deve impedir que a vpn funcione?

    

Answer 1

A última linha do seu arquivo de log é esta:

Dec 4 07:11:19 user-pc NetworkManager[821]: <info> Policy set 'tun0' (tun0) as default for IPv4 routing and DNS

O que isto significa é que sua interface tun0 , ou VPN, está sendo usada como a rota padrão para suas conexões com a Internet. Se o servidor OpenVPN não estiver configurado para permitir que sua rede VPN acesse a Internet, suas conexões terão o tempo limite como estão fazendo agora.

No seu Ubuntu 15.10 32-bit (servidor OpenVPN), você terá que executar o seguinte comando iptables (ou um similar), a fim de permitir o acesso à Internet para a sua sub-rede VPN.

# iptables -t nat -A POSTROUTING -s $your_vpn_network -o $wan_interface -j MASQUERADE

O que essa regra faz é NAT, qualquer conexão proveniente de sua rede VPN destinada a uma rede fora da interface WAN, que deve resolver seu problema.

Espero que isso ajude