Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-16 Thread Tom Roche
For the benefit of OP with similar {concerns, interests, problems}, I have documented my process @ https://bitbucket.org/tlroche/linode_jumpbox_config/wiki/Home Part is scripted, and part is not, but even the part that is *not* scripted provides cut'n'pasteable console input. The good news is,

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-10 Thread Pascal Hambourg
Tom Roche a écrit : > > me@laptop:~$ date ; traceroute www.whatismyip.com >> Sun Nov 9 09:33:06 EST 2014 >> traceroute to www.whatismyip.com (141.101.120.15), 30 hops max, 60 byte >> packets >> 1 10.8.0.1 (10.8.0.1) 99.579 ms 99.584 ms 104.230 ms >> 2 * * * > ... This shows that forwardi

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Mart van de Wege
Tom Roche writes: > summary: I have a routing problem on the server side of the VPN, as > diagnosed by Mart van de Wege[1]: veel dank Mart! I hope to fix that > problem using these linode instructions[2]. > No problem, I remember tearing my hair out when I ran into this in the past, at home and a

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Tom Roche
summary: I have a routing problem on the server side of the VPN, as diagnosed by Mart van de Wege[1]: veel dank Mart! I hope to fix that problem using these linode instructions[2]. details: Tom Roche Sat, 08 Nov 2014 23:47:29 -0500 [3] >>> My jumpbox/server firewall is currently set to forward

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Pascal Hambourg
Tom Roche a écrit : > > My jumpbox/server firewall is currently set to forward everything, using > `iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE` This rule doesn't forward anything, it just enables masquerading. IPv4 forwarding is enabled with sysctl net.ipv4.ip_forward=1.

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Mart van de Wege
Tom Roche writes: > > * `ifconfig` shows a new entry=`tun0`, which looks correct > * I can `ping` the server using either its real IP# or `10.8.0.1` > * I can `ssh` to the server using either its real IP# or `10.8.0.1` > * `nslookup www.whatismyip.com` gives correct results > This tells me that

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-08 Thread Tom Roche
for completeness, added server firewall settings below: Tom Roche Sat, 08 Nov 2014 21:07:03 -0500 https://lists.debian.org/debian-user/2014/11/msg00440.html > summary: I'm running [OpenVPN] from an LMDE [client through a Debian > jumpbox/server]. After I [start the server, start the client] mos

[newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-08 Thread Tom Roche
summary: I'm running an SSL VPN from an LMDE host through a Debian jumpbox. After I [start the server, start the client] most IP-based applications seem to work from the client, but web browsing fails: e.g., client's Firefox cannot connect to http://www.whatismyip.com/ . How to fix or debug? d