can't connect kdepim vm
Closed, ResolvedPublic

Description

After disabling ipv6 i can connect openVPN. But I can reach the kdepim-vm.

here my ip setting:

$ ip a list tun0
18: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100
    link/none 
    inet 10.150.80.42 peer 10.150.80.41/32 brd 10.150.80.42 scope global noprefixroute tun0
       valid_lft forever preferred_lft forever
    inet6 fe80::6e15:99a1:7186:cafe/64 scope link stable-privacy 
       valid_lft forever preferred_lft forever

$ ip r list dev tun0
10.150.80.0/24 via 10.150.80.41 proto static metric 50 
10.150.80.0/20 via 10.150.80.41 proto static metric 50 
10.150.80.41 proto kernel scope link src 10.150.80.42 metric 50

The kdepim-vm addess is inside the netmask 10.150.80.0/20, so it should be reachable. And there are no other routes that are working against:

$ ip r
default via 10.59.35.1 dev wlp2s0 proto dhcp metric 600 
10.59.35.0/24 dev wlp2s0 proto kernel scope link src 10.59.35.132 metric 600 
10.59.35.1 dev wlp2s0 proto static scope link metric 600 
10.150.80.0/24 via 10.150.80.41 dev tun0 proto static metric 50 
10.150.80.0/20 via 10.150.80.41 dev tun0 proto static metric 50 
10.150.80.41 dev tun0 proto kernel scope link src 10.150.80.42 metric 50 
144.76.220.218 via 10.59.35.1 dev wlp2s0 proto static metric 600 
169.254.0.0/16 dev bridge0 scope link metric 1000 
192.168.5.0/24 dev bridge0 proto kernel scope link src 192.168.5.1

I've disabled the default gw through the KDE infrastructure, so there is NO:

default via 10.150.80.41 dev tun0 proto static metric 50

But I can't ping anything the gateway:

# ping 10.150.80.41
PING 10.150.80.41 (10.150.80.41) 56(84) bytes of data.
^C
--- 10.150.80.41 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3050ms

nor the kdepim-vm:

# ping 10.150.85.132
PING 10.150.85.132 (10.150.85.132) 56(84) bytes of data.
^C
--- 10.150.85.132 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2033ms

and ssh and vnc timeout...

$ ssh pim@10.150.85.132
ssh: connect to host 10.150.85.132 port 22: Connection timed out

Related Objects

StatusAssignedTask
Resolvedbcooksley
knauss created this task.Feb 7 2018, 11:35 AM
dvratil added a comment.EditedFeb 7 2018, 4:55 PM

Make sure to turn off lzo compression on the VPN connection (--comp-lzo no). Ben did not mention it in his email, but without it I couldn't connect to the VM either.

Actually the trick is to turn lzmo *on* explicitly. This is my openvpn config if it helps you:

client
remote nellie.kde.org
ca "/data/KDE/vpn/ca.crt"
cert "/data/KDE/vpn/user-dvratil.crt"
key "/data/KDE/vpn/user-dvratil.key"
tls-auth "/data/KDE/vpn/ta.key" 1
dev tun
proto udp
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nobody
comp-lzo yes
link-mtu 1542
knauss closed this task as Resolved.Feb 7 2018, 5:33 PM

okay this works for ne now VNC and ssh . great!