OpenVPN Access Server

David_P

Has anyone else gotten OpenVPN-AS to work on IPXcore? I keep getting IPTable errors.

service failed to start due to unresolved dependencies: set(['user']) service failed to start due to unresolved dependencies: set(['iptables_openvpn']) Service deferred error: IPTablesServiceBase: failed to run iptables-restore [status=1]: ['iptables-restore: line 59 failed']: internet/defer:323,sagent/ipts:119,sagent/ipts:46,util/mycprof:11,:1,sagent/sagent_entry:14,sagent/sagent_entry:11,util/daemon:28,util/daemon:69,application/app:423,scripts/_twistd_unix:202,application/app:445,application/app:348,internet/base:1166,internet/base:1178,internet/epollreactor:194,python/log:85,python/log:70,python/context:59,python/context:37,internet/epollreactor:223,internet/posixbase:191,internet/process:260,internet/process:762,internet/process:775,internet/_baseprocess:60,svc/pp:116,svc/svcnotify:32,internet/defer:238,internet/defer:307,internet/defer:323,sagent/ipts:119,sagent/ipts:46,util/error:60,util/error:43 service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn']) service failed to start due to unresolved dependencies: set(['iptables_live', 'iptables_openvpn'])

I allowed everything through IPTables, opened a ticket, but I can't seem to be able to solve the issue.

Alex_LiquidHost

Try disabling them completly /etc/init.d/iptables save /etc/init.d/iptables stop chkconfig iptables off

On centos

David_P

Disabled iptables all the way, same errors :(

emilv

Dont know if this is the issue, but ask your host if he has ppp_mppe/mppe enabled. Reinstall of OpenVPN-AS might be needed after it's enabled.

djvdorp

Yes i did, without any issue. No iptables or whatsoever. Installed openvpn from their tutorial. See my other topic. (Was another vps though wIth 128mb ram)

Voss

If all else fails, drop by #lowendbox and see whether novaflash can sort you out.

birdie25

@Damian

JoeMerit

its missing an iptables module that is required for OpenVPN AS to work on OpenVZ.

Damian has to enable it.

David_P

@djvdorp said: Yes i did, without any issue. No iptables or whatsoever. Installed openvpn from their tutorial. See my other topic. (Was another vps though wIth 128mb ram)

OpenVPN-as? Or community edition? I dislike the community edition.

@emilv said: ppp_mppe/mppe enabled

Openvpn runs TAP/TUN. So PPP is the wrong protocol, and would not need to be enabled.

@Dionysus said: novaflash can sort you out.

How would he sort me out?

@JoeMerit said: its missing an iptables module that is required for OpenVPN AS to work on OpenVZ. Damian has to enable it.

Damian said all the required modules were loaded such as the mark modules, so I'm unsure of what else would need to be enabled.

JoeMerit

http://openvpn.net/index.php/access-server/docs/admin-guides/186-how-to-run-access-server-on-a-vps-container.html

Does he have both ipt_mark and ipt_MARK enabled ?

Damian

[root@diamond conf]# lsmod | grep ipt
ipt_REDIRECT           34944  0
ipt_owner              34944  0
ipt_ttl                34816  0
ipt_TCPMSS             37248  5
ipt_LOG                39808  7
ipt_TOS                35200  0
ipt_tos                34560  0
ipt_REJECT             39684  16
iptable_filter         37760  348
iptable_mangle         37888  313
iptable_nat            43148  645
ip_nat                 53392  4 vzrst,ipt_REDIRECT,ip_nat_ftp,iptable_nat
ip_tables              57440  3 iptable_filter,iptable_mangle,iptable_nat
x_tables               52616  19 xt_MARK,xt_mark,ip6_tables,ipt_REDIRECT,ipt_owner,xt_length,ipt_ttl,xt_tcpmss,ipt_TCPMSS,xt_multiport,xt_limit,ipt_LOG,ipt_TOS,ipt_tos,ipt_REJECT,iptable_nat,ip_tables,xt_tcpudp,xt_state
ip_conntrack          101396  319 vzrst,vzcpt,ip_nat_ftp,iptable_nat,ip_nat,xt_state

Damian

Additionally, note that ipt_mark and MARK are now called xt_mark and MARK to reflect the fact that they are compatible with both ipv4 and ipv6.

David_P

All that needed to be done is for the module 'ipt_state' to be loaded, server starts up fine now.

Thanks guys, and thanks to the excellent support @ IPXCore.

JoeMerit

Awesome