Как правильно настроить OpenVPN?

Question

[Илья]

Доброй ночи, пытаюсь настроить на свежем VPS от Hetzner. И нечего не получается. В логи нечего не пишется, а при подключении в интерфейсе выдает только это. Для iptables указал.

iptables -A FORWARD -i eth0 -o tun0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

Tue Sep 13 02:11:02 2016 OpenVPN 2.3.12 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 23 2016
Tue Sep 13 02:11:02 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Sep 13 02:11:02 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Tue Sep 13 02:11:02 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 13 02:11:02 2016 Need hold release from management interface, waiting...
Tue Sep 13 02:11:03 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'state on'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'log all on'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'hold off'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'hold release'
Tue Sep 13 02:11:03 2016 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Sep 13 02:11:03 2016 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Sep 13 02:11:03 2016 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Sep 13 02:11:03 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Sep 13 02:11:03 2016 MANAGEMENT: >STATE:1473714663,RESOLVE,,,
Tue Sep 13 02:11:03 2016 UDPv4 link local: [undef]
Tue Sep 13 02:11:03 2016 UDPv4 link remote: [AF_INET]78.47.95.2:1194
Tue Sep 13 02:11:03 2016 MANAGEMENT: >STATE:1473714663,WAIT,,,
Tue Sep 13 02:11:03 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:05 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:10 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:18 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:34 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)

server.conf

port 1194
proto udp
dev tun

ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
auth SHA512
cipher AES-128-CBC
tls-auth ta.key 0
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1 bypass-dhcp"

client.conf

client

cipher AES-128-CBC
auth SHA512
dev tun
proto udp

remote discharge.be 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
tls-auth ta.key 1
comp-lzo

verb 3

Answer 1

[younghacker]

Логи не пишутся потому что не настроены.
Опции нет ни в клиентском ни в серверном конфигах.

log                   /var/log/openvpn-udp1194.log
verb 3

Для винды другой каталог куда логи писать.

На сервере сделайте 2 вещи:
1) откройте UDP порт 1194

-A INPUT -i eth0 -p udp -m state --state NEW -m udp --dport 1194 -j VPN

2) проверьте что SELinux ничего не блокирует. Можно ВРЕМЕННО отключить
setenforce 0