Problem s OpenVPN po upgrade

[Ciernik Tomas]

Zdravim,


po upgrade freebsd z 6.1-RELEASE na 6.2-STABLE prostrednictvom CVSup sa mi
vyskytol neprijemny problem s openvpn - klienti nie su schopni komunikovat
so serverom.


Na upresnenie - nadviazanie VPN spojenia prebehne bez problemov a klient je
schopny komunikovat so vsetkymi ostatnymi PC v lokalnej sieti. Komunikacia
nie je mozna len so serverom samotnym.


Nastavenim firewallu to nebude - nema pre vpn klientov ziadne obmedzenia.


Ak by ma niekto vedel "nakopnut" spravnym smerom, velmi by mi to pomohlo -
svoje napady (nastavenie firewallu, nastavenie routrovacej tabulky,
prekompilovanie openvpn) som uz vycerpal a na nete som nic rozumne nenasiel.


Len pre uplnost dodavam, ze som z jadra odstranil volbu (zrejme
nesuvisiacu s popisovanym problemom)

options IPFIREWALL_FORWARD_EXTENDED


plus este nejake vystupy

> netstat -r -n
Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            192.168.15.120     UGS         0    28530    rl0
127.0.0.1          127.0.0.1          UH          0    16579    lo0
192.168.10         link#1             UC          0        0    re0
192.168.10.10      00:15:e9:f2:2a:ed  UHLW        1   107878    re0    860
192.168.10.255     ff:ff:ff:ff:ff:ff  UHLWb       1      271    re0
192.168.15         link#2             UC          0        0    rl0
192.168.15.120     00:4f:61:00:d4:d4  UHLW        2        0    rl0   1184


> sysctl -a | grep net.link.ether.bridge
net.link.ether.bridge.version: 031224
net.link.ether.bridge.debug: 0
net.link.ether.bridge.ipf: 0
net.link.ether.bridge.ipfw: 0
net.link.ether.bridge.copy: 0
net.link.ether.bridge.ipfw_drop: 0
net.link.ether.bridge.ipfw_collisions: 0
net.link.ether.bridge.packets: 279982
net.link.ether.bridge.dropped: 0
net.link.ether.bridge.predict: 0
net.link.ether.bridge.enable: 1
net.link.ether.bridge.config: re0,tap0
net.link.ether.bridge_ipf: 0
net.link.ether.bridge_ipfw: 0
net.link.ether.bridge_cfg: re0,tap0


> ifconfig
re0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        options=1b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING>
        inet 192.168.10.40 netmask 0xffffff00 broadcast 192.168.10.255
        ether 00:15:e9:f2:2a:45
        media: Ethernet autoselect (1000baseTX <full-duplex>)
        status: active
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=8<VLAN_MTU>
        inet 192.168.15.40 netmask 0xffffff00 broadcast 192.168.15.255
        ether 00:50:8d:49:42:e4
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet 127.0.0.1 netmask 0xff000000
tap0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        ether 00:bd:ff:1e:00:00


Dakujem za pomoc,

Tomas Ciernik