[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] routing issue with iproute2 and several local addresses


  • Subject: Re: [Openvpn-users] routing issue with iproute2 and several local addresses
  • From: James Yonan <jim@xxxxxxxxx>
  • Date: Mon, 20 Dec 2004 06:07:45 -0700 (MST)


On Mon, 20 Dec 2004, Sebastian Pein wrote:

> hi list.
> 
> being about to get done a setup with more than one route to the internet. there
> are two internetuplinks: one with a dynamic ip address and a static one. the
> dynamic dsl uplink is for users to download mails and surf the web, the leased
> line is for an ipsec vpn to another net.
> 
> the linux box itself is the default gateway for all machines equipped with 3
> nics: eth0 lan, eth1 ipsec uplink, eth2 for pppd as the dsl peer. pppd sets the
> default route of the box to the ppp-peer. routing to the ipsec peer is working
> because of fine openswan ipsec implementation.
> 
> now to my problem. i want to drive another vpn with openvpn over the leasedline
> uplink. right now, the packets reach the linux box but no packets will be sent
> back. for testing purposes i did run the openvpn over my defaultroute on ppp0,
> everything right on that nic. all packets were going where i expected them to
> go. running the setup over a different nic than the default route one should be
> possible with the kernel features in conjunction with iproute2 ("iptables -j
> fwmark" and "ip rule/route"). kernel version is 2.6.9, distro debian.
> 
> in the end it all comes down to a message in the openvpn log: "No outgoing
> address to send packet". google found nothing than entries in cvs-repositories
> of openvpn.
> 
> openvpn is started with "local `ip of nic`", tcpdump shows the sender ip of
> incoming packets. what does "No outgoing address to send packet" say? for me it
> looks like something similar to "no route to host".
> 
> can anyone help?

"No outgoing address to send packet" usually means there's no --remote 
address defined.

It's probably an issue with your config file.

James


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users