trailofbits / algo

Set up a personal VPN in the cloud
https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-that-works/
GNU Affero General Public License v3.0
28.65k stars 2.31k forks source link

Connecting to local servers through the VPN #14250

Open S7uXN37 opened 3 years ago

S7uXN37 commented 3 years ago

Is your feature request related to a problem? Please describe. My use case is this: I want a publicly accessible VPN server at home to get into my local network from anywhere. This works fine after a local install on an Ubuntu machine at home and I can reach the internet through the VPN as well as other connected clients (I've configured it that way; i.e. I can connect to other 10.49.0.0/16 clients).

But I also have other servers running in my home network (192.168.1.1 etc) that I would like to access via the VPN but that seems to not work. Trying to ping them gives me a "General Failure" and my Chrome browser gives me a "ERR_NETWORK_ACCESS_DENIED".

Describe the solution you'd like I assume this is an issue with the firewall configuration, but I've never used iptables for more than allowing connections to my minecraft server. I tried to accept all packets and do some logging but I didn't see any results.

I would be extremely grateful if someone could guide me in figuring out what the problem is and/or provide me with a solution. I can provide logs and try suggestions as needed; let me know.

tomatoandcake commented 2 years ago

I second this issue.

I have my Also VPN up and running on a local LAN ubuntu server. I've enabled the Road Warrior setup so users can talk to one another. ie:

`BetweenClients_DROP: false

Block SMB/CIFS traffic

block_smb: false

Block NETBIOS traffic

block_netbios: false`

Connected users can talk to one another on the VPN's 10.48.0.0/16, and they can access various services I have running on my local LANs (10.0.77.1/24 etc). Users on the VPN can access LAN services fine - but LAN users cannot ping or reach users on the VPN side.

Like you @S7uXN37 I get similar errors - but it seems only if I try and connect from my local LAN to VPN connected users. Not the other way around.