Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-16 Thread Tom Roche
For the benefit of OP with similar {concerns, interests, problems}, I have documented my process @ https://bitbucket.org/tlroche/linode_jumpbox_config/wiki/Home Part is scripted, and part is not, but even the part that is *not* scripted provides cut'n'pasteable console input. The good news

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-10 Thread Pascal Hambourg
Tom Roche a écrit : me@laptop:~$ date ; traceroute www.whatismyip.com Sun Nov 9 09:33:06 EST 2014 traceroute to www.whatismyip.com (141.101.120.15), 30 hops max, 60 byte packets 1 10.8.0.1 (10.8.0.1) 99.579 ms 99.584 ms 104.230 ms 2 * * * ... This shows that forwarding is

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Mart van de Wege
Tom Roche tom_ro...@pobox.com writes: * `ifconfig` shows a new entry=`tun0`, which looks correct * I can `ping` the server using either its real IP# or `10.8.0.1` * I can `ssh` to the server using either its real IP# or `10.8.0.1` * `nslookup www.whatismyip.com` gives correct results This

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Pascal Hambourg
Tom Roche a écrit : My jumpbox/server firewall is currently set to forward everything, using `iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE` This rule doesn't forward anything, it just enables masquerading. IPv4 forwarding is enabled with sysctl net.ipv4.ip_forward=1.

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Tom Roche
summary: I have a routing problem on the server side of the VPN, as diagnosed by Mart van de Wege[1]: veel dank Mart! I hope to fix that problem using these linode instructions[2]. details: Tom Roche Sat, 08 Nov 2014 23:47:29 -0500 [3] My jumpbox/server firewall is currently set to forward

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-09 Thread Mart van de Wege
Tom Roche tom_ro...@pobox.com writes: summary: I have a routing problem on the server side of the VPN, as diagnosed by Mart van de Wege[1]: veel dank Mart! I hope to fix that problem using these linode instructions[2]. No problem, I remember tearing my hair out when I ran into this in the

[newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-08 Thread Tom Roche
summary: I'm running an SSL VPN from an LMDE host through a Debian jumpbox. After I [start the server, start the client] most IP-based applications seem to work from the client, but web browsing fails: e.g., client's Firefox cannot connect to http://www.whatismyip.com/ . How to fix or debug?

Re: [newbie] OpenVPN: {DNS, ping, ssh} work, HTTP fails

2014-11-08 Thread Tom Roche
for completeness, added server firewall settings below: Tom Roche Sat, 08 Nov 2014 21:07:03 -0500 https://lists.debian.org/debian-user/2014/11/msg00440.html summary: I'm running [OpenVPN] from an LMDE [client through a Debian jumpbox/server]. After I [start the server, start the client] most