[Err] Re: [Openvpn-users] Newbie VPN setup problems

[postmaster@xxxxxxxx]

Transmit Report:

iryna7@xxxxxxxx¿¡°Ô ¸ÞÀÏ ¹ß¼ÛÀ» 3¹ø ½ÃµµÇßÁö¸¸ ½ÇÆÐÇÏ¿´½À´Ï´Ù.
(½ÇÆÐ ÀÌÀ¯ : 550 <iryna7@xxxxxxxx>: Recipient address rejected: User unknown in local recipient table(211.232.190.7))

<Âü°í> ½ÇÆÐ ÀÌÀ¯¿¡ ´ëÇÑ ¼³¸í
User unknown       :¸ÞÀÏÀ» ¼ö½ÅÇÒ »ç¿ëÀÚ°¡ Á¸ÀçÇÏÁö ¾ÊÀ½
Socket connect fail:¼ö½Å ¸ÞÀÏ ¼­¹ö¿Í ¿¬°á ½ÇÆÐ
DATA write fail    :¼ö½Å ¸ÞÀÏ ¼­¹ö·Î ¸Þ¼¼Áö ¼Û½Å ½ÇÆÐ
DATA reponse fail  :¼ö½Å ¸ÞÀÏ ¼­¹ö·ÎºÎÅÍ ¸Þ¼¼Áö ¼ö½Å ½ÇÆÐ

Reporting-MTA: dns; nexg.net

Final-Recipient: rfc822;iryna7@nexg.net
Diagnostic-Code: smtp; 550 error - <iryna7@nexg.net>: Recipient address rejected: User unknown in local recipient table(211.232.190.7)
Action: failed
Status: 5.0.0

--- Begin Message ---

• Subject: Re: [Openvpn-users] Newbie VPN setup problems
• From: Jon Bendtsen <jon.bendtsen@xxxxxxxxxx>
• Date: Mon, 3 Apr 2006 22:31:58 +0200

Den søndag 2.apr kl. 14:54 skrev Marko Asplund:

Jeffrey Gross wrote:

it might be that the connection you're establishing with your VPN
is on a different subnet than the rest of your network.

There's instructions on routing here: http://openvpn.net/ howto.html#scope

thanks for the replies.

i read through the references but being a bit new to this it's still not clear to me how i should setup OpenVPN.

here's a bit more background on my network setup:

- OpenVPN setup uses the 10.8.0.0/24 net
- company internal net includes just a single subnet a.b.c.d/25 which uses public IPs
- VPN server is in the internal net (connections to other servers is blocked by the firewall)

my problem, as far as i understand, is that i need to access servers in the same network where the VPN server is located and that their addresses are in public DNS. i can't just route all traffic to a.b.c.d/25 through the VPN since that would also route the tunnel through the tunnel :-)

how is this sort of scenario typically handled with OpenVPN?

Either by adding lots of routes for those machines. Suppose you have a /24.
That /24 can be divided into 2 /25. One of these /25 does NOT contain the
OpenVPN server, so you can just add a route for that /25. The other / 25 can
be divided the same way, untill you get down to just a few hosts arround the
openvpn server. Add /32 routes for these hosts.

The other solution is to look at the --redirect-gateway directive and send ALL
traffic through the tunnel.

JonB
____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users

--- End Message ---

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users