[mikelosat]

Salve amici sul mio server OPENVPN non capisco perchè all'improvviso ricevo il seguente errore:

Codice:

-- Logs begin at Sun 2020-01-19 11:39:30 CET, end at Sun 2020-01-19 14:05:18 CET. --
gen 19 14:05:18 raspberrypi ovpn-server_tun[7967]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/server_tun.conf
gen 19 14:05:18 raspberrypi ovpn-server_tun[7967]: Use --help for more information.
gen 19 14:05:18 raspberrypi ovpn-vpnname[7968]: Options error: You must define TUN/TAP device (--dev)
gen 19 14:05:18 raspberrypi ovpn-vpnname[7968]: Use --help for more information.
gen 19 14:05:18 raspberrypi systemd[1]: openvpn@server_tun.service: Main process exited, code=exited, status=1/FAILURE
-- Subject: Unit process exited
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- An ExecStart= process belonging to unit openvpn@server_tun.service has exited.
--
-- The process' exit code is 'exited' and its exit status is 1.
gen 19 14:05:18 raspberrypi systemd[1]: openvpn@server_tun.service: Failed with result 'exit-code'.
-- Subject: Unit failed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- The unit openvpn@server_tun.service has entered the 'failed' state with result 'exit-code'.
gen 19 14:05:18 raspberrypi systemd[1]: Failed to start OpenVPN connection to server_tun.
-- Subject: L'unità openvpn@server_tun.service è fallita
-- Defined-By: systemd
-- Support: https://www.debian.org/support

non capisco a cosa sia dovuto...

[mikelosat]

mi rispondo da solo, ho risolto questo problema configurando in modo corretto le IPTABLES, ho aggiunto questi permessi ed adesso la mia OPENVPN funziona in modo perfetto:

1. iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 1194 -j ACCEPT

2. iptables -A INPUT -i tun+ -j ACCEPT

3. iptables -A FORWARD -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT

4. iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

5. iptables -A OUTPUT -o tun+ -j ACCEPT