Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I'm trying to use OpenVPN on my remote Ubuntu 12.04 web server, but as soon as OpenVPN is running, I can't connect to the internet.

Befor starting OpenVPN, route says:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         ip-172-31-16-1. 0.0.0.0         UG    100    0        0 eth0
172.31.16.0     *               255.255.240.0   U     0      0        0 eth0

and after:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         10.200.4.1      128.0.0.0       UG    0      0        0 tun0
default         172.31.16.1     0.0.0.0         UG    100    0        0 eth0
10.200.4.0      *               255.255.252.0   U     0      0        0 tun0
128.0.0.0       10.200.4.1      128.0.0.0       UG    0      0        0 tun0
172.31.16.0     *               255.255.240.0   U     0      0        0 eth0
184.170.137.2   172.31.16.1     255.255.255.255 UGH   0      0        0 eth0

184.170.137.2 is the VPN. The OpenVPN HOWTO suggests to use

iptables -t nat -A POSTROUTING -s 10.200.4.0/22 -o eth0 -j MASQUERADE

which throws

sudo: unable to resolve host ip-172-31-26-178 

(172.31.26.178 is the internal IP).

If I do the following, I can use the VPN for a single website:

route add -net {website ip} netmask 255.255.255.255 gw 10.200.4.1 dev tun0
route del -net 0.0.0.0 netmask 128.0.0.0 dev tun0
route del -net 128.0.0.0 netmask 128.0.0.0 dev tun0 

How can I change this to work for the whole web? Help is greatly appreciated.

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.