What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

OpenVPN & iptables

hw1380

Regular Contributor
Router: RT-AC68U
Firmware: 380.62_1

I can successfully establish a OpenVPN connection, but if I disconnect this connection, DNS is not working anymore on the clients.
I noticed that the following NAT rules are still active:

Chain PREROUTING (policy ACCEPT 52 packets, 5740 bytes)
num pkts bytes target prot opt in out source destination
1 36 4700 VSERVER all -- any any anywhere <WAN IP>
2 2583 179K DNSVPN5 udp -- any any anywhere anywhere udp dpt:domain
3 0 0 DNSVPN5 tcp -- any any anywhere anywhere tcp dpt:domain

Chain DNSVPN5 (2 references)
num pkts bytes target prot opt in out source destination
1 1353 98404 RETURN all -- any any 192.168.45.99 anywhere
2 1230 80852 DNAT all -- any any 192.168.45.0/24 anywhere to:10.11.55.1

I get DNS working by removing both entries in chain DNSVPN5 and entry 2+3 in chain PREROUTING.
I'm not 100% sure but I cannot remember having this issue with 380.58.

Details to OpenVPN:
Encryption cipher: AES-256-CBC
Accept DNS configuration: strict
Block routed clients if tunnel goes down: No
Redirect internet traffic: Policy rules
TV 192.168.45.99 0.0.0.0 WAN
all-other 192.168.45.0/24 0.0.0.0 VPN

I don't know if the router is taking care about those rules or the rules are being pushed by the VPN server.
 

Similar threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top