Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Sun Oct 30, 2011 9:21 pm 
Offline

Joined: Sun Oct 30, 2011 8:55 pm
Posts: 1
Hi everyone,

I'm a little stuck...

I've followed the guide http://library.linode.com/networking/openvpn/centos-5 to set up OpenVPN.

I also set up phpMyAdmin.

Once I connect to my OpenVPN, my ip address changes to my server ip address but I still cannot access phpMyAdmin.


the conf for my phpMyAdmin.conf is

<Directory /usr/share/phpMyAdmin/>
Order Deny,Allow
Deny from All
Allow from 10.8.
Allow from [server ip address]
Allow from 127.0.0.1
Allow from ::1
</Directory>

I am only able to access domain/phpmyadmin if i add..
Allow from "home ip address" even when connected to openVPN and my http://www.whatismyip.com/ is "server ip address"


I'm thinking that the problem is.. an OpenVPN issue and I need to change the server.conf to "dev tap" instead of "dev tun" (it is current on "dev tun").


Any helpful advice or suggestions will be greatly appreciated! :).

Thanks in advance.


Top
   
 Post subject:
PostPosted: Sun Oct 30, 2011 10:34 pm 
Offline
Senior Member
User avatar

Joined: Sat Aug 30, 2008 1:55 pm
Posts: 1739
Location: Rochester, New York
If you are trying to access something on the same IP address as the OpenVPN endpoint, the traffic will not travel via OpenVPN. You can't route traffic to the same IP address as the other end of the tunnel over the tunnel because OpenVPN needs to be able to reach the IP address of the other end of the tunnel without going over the tunnel because a tunnel can't tunnel itself.

Also, NAT is applied on egress: your traffic doesn't take on the server's IP address until immediately before it leaves the server, which traffic terminating within the server never does.

Consider connecting to the IP address of the far side of the tunnel (by the library config, it would be 10.8.0.1).

_________________
Code:
/* TODO: need to add signature to posts */


Top
   
 Post subject:
PostPosted: Sun Oct 30, 2011 10:48 pm 
Offline
Senior Member

Joined: Fri May 02, 2008 8:44 pm
Posts: 1121
hoopycat wrote:
You can't route traffic to the same IP address as the other end of the tunnel over the tunnel because OpenVPN needs to be able to reach the IP address of the other end of the tunnel without going over the tunnel because a tunnel can't tunnel itself.

What? :roll:


Top
   
 Post subject:
PostPosted: Sun Oct 30, 2011 11:37 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
Yes but he did use the word "egress" correctly in a sentence, so cut him some slack. :lol:


Top
   
 Post subject:
PostPosted: Sun Oct 30, 2011 11:43 pm 
Offline
Senior Member
User avatar

Joined: Sat Aug 30, 2008 1:55 pm
Posts: 1739
Location: Rochester, New York
Perhaps this will be more clear, hybinet. If we apply the z-transform to the problem, we find its polar (that is, z-plane) representation is of the form

Image

where the tunnel endpoint and endpoint tunnel termini converge at a point z = 0+j1. Although the system is not unstable (as r is constant and not greater than one), it is clear that the packets aren't going to go anywhere if they're going to where they're coming from to get where they're going.


Top
   
 Post subject:
PostPosted: Mon Oct 31, 2011 4:00 am 
Offline
Senior Member

Joined: Mon Dec 07, 2009 6:46 am
Posts: 331
hoopycat wrote:
z = 0+j1.


Dude, this is totally uncalled for, seriously. :mrgreen:

Next thing you'll say is that the snake you got the pic of is hiding in one of the infinite crevices of the Mandelbrot set resulting from the equation?


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group