Einrichtung von VPN Routing über Fritzbox 7170 und OpenVPN

[sonny_luke]

Anbei noch meine .config

FREETZ_HAVE_DOT_CONFIG=y
FREETZ_USER_LEVEL_EXPERT=y
FREETZ_SHOW_ADVANCED=y
FREETZ_SHOW_EXPERT=y
FREETZ_TYPE_7170=y
FREETZ_TYPE_LANG_DE=y
FREETZ_TYPE_FIRMWARE_04_XX=y
FREETZ_TYPE_FIRMWARE_FINAL=y
FREETZ_TYPE_LANGUAGE="de"
FREETZ_SQUASHFS_BLOCKSIZE_65536=y
FREETZ_SQUASHFS_BLOCKSIZE=65536
FREETZ_REMOVE_DTRACE=y
FREETZ_REMOVE_HELP=y
FREETZ_REMOVE_MINID=y
FREETZ_PATCH_FREETZMOUNT=y
FREETZ_USBSTORAGE_AUTOMOUNT=y
FREETZ_AUTOMOUNT_FAT=y
FREETZ_ADD_ETCSERVICES=y
FREETZ_PACKAGE_CALLMONITOR=y
FREETZ_PACKAGE_CALLMONITOR_webif=y
FREETZ_PACKAGE_CALLMONITOR_actions=y
FREETZ_PACKAGE_CALLMONITOR_monitor=y
FREETZ_PACKAGE_CALLMONITOR_phonebook=y
FREETZ_PACKAGE_CIFSMOUNT=y
FREETZ_PACKAGE_DROPBEAR=y
FREETZ_PACKAGE_DROPBEAR_DISABLE_HOST_LOOKUP=y
FREETZ_PACKAGE_HASERL=y
FREETZ_PACKAGE_INETD=y
FREETZ_PACKAGE_OPENVPN=y
FREETZ_PACKAGE_OPENVPN_VERSION_2_3=y
FREETZ_PACKAGE_OPENVPN_OPENSSL=y
FREETZ_PACKAGE_OPENVPN_WITH_LZO=y
FREETZ_PACKAGE_OPENVPN_WITH_MGMNT=y
FREETZ_PACKAGE_OPENVPN_ENABLE_SMALL=y
FREETZ_PACKAGE_VSFTPD=y
FREETZ_PACKAGE_FSTYP=y
FREETZ_PACKAGE_USBROOT=y
FREETZ_PACKAGE_WOL=y
FREETZ_PACKAGE_AUTHORIZED_KEYS=y
FREETZ_PACKAGE_AVM_FIREWALL=y
FREETZ_PACKAGE_SYSLOGD_CGI=y
FREETZ_PACKAGE_WOL_CGI=y
FREETZ_PACKAGE_IPTABLES=y
FREETZ_PACKAGE_IPTABLES_IS_SELECTABLE=y
FREETZ_PACKAGE_IPTABLES_SAVE_RESTORE=y
FREETZ_PACKAGE_IPTABLES_XML=y
FREETZ_PACKAGE_IPTABLES_CGI=y
FREETZ_PACKAGE_NHIPT=y
FREETZ_PACKAGE_IPTABLES_STANDARD_MODULES=y
FREETZ_PACKAGE_IPTABLES_KERNEL_MODULES=y
FREETZ_MODULE_ip_conntrack=y
FREETZ_MODULE_ip_conntrack_ftp=y
FREETZ_MODULE_iptable_filter=y
FREETZ_MODULE_iptable_nat=y
FREETZ_MODULE_ip_tables=y
FREETZ_MODULE_ipt_iprange=y
FREETZ_MODULE_ipt_LOG=y
FREETZ_MODULE_ipt_mac=y
FREETZ_MODULE_ipt_MASQUERADE=y
FREETZ_MODULE_ipt_multiport=y
FREETZ_MODULE_ipt_REDIRECT=y
FREETZ_MODULE_ipt_REJECT=y
FREETZ_MODULE_ipt_state=y
FREETZ_PACKAGE_IPTABLES_SHARED_LIBS=y
FREETZ_LIB_libipt_DNAT=y
FREETZ_LIB_libipt_LOG=y
FREETZ_LIB_libipt_MASQUERADE=y
FREETZ_LIB_libipt_REDIRECT=y
FREETZ_LIB_libipt_SNAT=y
FREETZ_LIB_libxt_iprange=y
FREETZ_LIB_libxt_mac=y
FREETZ_LIB_libxt_multiport=y
FREETZ_LIB_libxt_standard=y
FREETZ_LIB_libxt_state=y
FREETZ_LIB_libxt_tcp=y
FREETZ_LIB_libxt_udp=y
FREETZ_PACKAGE_MOD=y
FREETZ_PACKAGE_MOD_ETCSERVICES=y
FREETZ_PACKAGE_MODCGI=y
FREETZ_LIB_libcrypto=y
FREETZ_LIB_libssl=y
FREETZ_OPENSSL_VERSION_PROMPT=y
FREETZ_OPENSSL_VERSION_0=y
FREETZ_OPENSSL_SHLIB_VERSION="0.9.8"
FREETZ_LIB_liblzo2=y
FREETZ_LIB_libpcap=y
FREETZ_LIB_ld_uClibc=y
FREETZ_LIB_libcrypt=y
FREETZ_LIB_libdl=y
FREETZ_LIB_libm=y
FREETZ_LIB_libpthread=y
FREETZ_LIB_librt=y
FREETZ_LIB_libuClibc=y
FREETZ_LIB_libutil=y
FREETZ_LIB_libgcc_s=y
FREETZ_LIB_libctlmgr=y
FREETZ_KERNEL_VERSION_2_6_13=y
FREETZ_KERNEL_VERSION="2.6.13.1"
FREETZ_KERNEL_VERSION_2_6_13_MIN=y
FREETZ_KERNEL_VERSION_2_6_13_MAX=y
FREETZ_KERNEL_VERSION_2_6_19_MAX=y
FREETZ_KERNEL_VERSION_2_6_28_MAX=y
FREETZ_KERNEL_VERSION_2_6_32_MAX=y
FREETZ_KERNEL_LAYOUT_OHIO=y
FREETZ_KERNEL_LAYOUT="ohio"
FREETZ_MODULES_KVER="2.6.13.1-ohio"
FREETZ_MODULE_cifs=y
FREETZ_BUSYBOX__MANDATORY=y
FREETZ_BUSYBOX_HAVE_DOT_CONFIG=y
FREETZ_BUSYBOX_PLATFORM_LINUX=y
FREETZ_BUSYBOX_FEATURE_BUFFERS_GO_ON_STACK=y
FREETZ_BUSYBOX_SHOW_USAGE=y
FREETZ_BUSYBOX_FEATURE_VERBOSE_USAGE=y
FREETZ_BUSYBOX_FEATURE_DEVPTS=y
FREETZ_BUSYBOX_FEATURE_PIDFILE=y
FREETZ_BUSYBOX_PID_FILE_PATH="/var/run"
FREETZ_BUSYBOX_FEATURE_SUID=y
FREETZ_BUSYBOX_FEATURE_PREFER_APPLETS=y
FREETZ_BUSYBOX_BUSYBOX_EXEC_PATH="/bin/busybox"
FREETZ_BUSYBOX_FEATURE_SYSLOG=y
FREETZ_BUSYBOX_FEATURE_HAVE_RPC=y
FREETZ_BUSYBOX_LFS=y
FREETZ_BUSYBOX_CROSS_COMPILER_PREFIX=""
FREETZ_BUSYBOX_SYSROOT=""
FREETZ_BUSYBOX_EXTRA_CFLAGS=""
FREETZ_BUSYBOX_EXTRA_LDFLAGS=""
FREETZ_BUSYBOX_EXTRA_LDLIBS=""
FREETZ_BUSYBOX_NO_DEBUG_LIB=y
FREETZ_BUSYBOX_INSTALL_APPLET_SYMLINKS=y
FREETZ_BUSYBOX_PREFIX="./_install"
FREETZ_BUSYBOX_PASSWORD_MINLEN=6
FREETZ_BUSYBOX_MD5_SMALL=1
FREETZ_BUSYBOX_SHA3_SMALL=1
FREETZ_BUSYBOX_FEATURE_USE_TERMIOS=y
FREETZ_BUSYBOX_FEATURE_EDITING=y
FREETZ_BUSYBOX_FEATURE_EDITING_MAX_LEN=1024
FREETZ_BUSYBOX_FEATURE_EDITING_HISTORY=255
FREETZ_BUSYBOX_FEATURE_TAB_COMPLETION=y
FREETZ_BUSYBOX_FEATURE_EDITING_FANCY_PROMPT=y
FREETZ_BUSYBOX_FEATURE_NON_POSIX_CP=y
FREETZ_BUSYBOX_FEATURE_COPYBUF_KB=64
FREETZ_BUSYBOX_FEATURE_SKIP_ROOTFS=y
FREETZ_BUSYBOX_MONOTONIC_SYSCALL=y
FREETZ_BUSYBOX_IOCTL_HEX2STR_ERROR=y
FREETZ_BUSYBOX_FEATURE_HWIB=y
FREETZ_BUSYBOX_FEATURE_SEAMLESS_GZ=y
FREETZ_BUSYBOX_GUNZIP=y
FREETZ_BUSYBOX_GZIP=y
FREETZ_BUSYBOX_GZIP_FAST=0
FREETZ_BUSYBOX_TAR=y
FREETZ_BUSYBOX_FEATURE_TAR_CREATE=y
FREETZ_BUSYBOX_FEATURE_TAR_FROM=y
FREETZ_BUSYBOX_FEATURE_TAR_OLDGNU_COMPATIBILITY=y
FREETZ_BUSYBOX_FEATURE_TAR_GNU_EXTENSIONS=y
FREETZ_BUSYBOX_BASENAME=y
FREETZ_BUSYBOX_CAT=y
FREETZ_BUSYBOX_DATE=y
FREETZ_BUSYBOX_FEATURE_DATE_ISOFMT=y
FREETZ_BUSYBOX_FEATURE_DATE_COMPAT=y
FREETZ_BUSYBOX_ID=y
FREETZ_BUSYBOX_TEST=y
FREETZ_BUSYBOX_TOUCH=y
FREETZ_BUSYBOX_FEATURE_TOUCH_SUSV3=y
FREETZ_BUSYBOX_TR=y
FREETZ_BUSYBOX_FEATURE_TR_CLASSES=y
FREETZ_BUSYBOX_FEATURE_TR_EQUIV=y
FREETZ_BUSYBOX_BASE64=y
FREETZ_BUSYBOX_CHMOD=y
FREETZ_BUSYBOX_CHOWN=y
FREETZ_BUSYBOX_CP=y
FREETZ_BUSYBOX_CUT=y
FREETZ_BUSYBOX_DD=y
FREETZ_BUSYBOX_FEATURE_DD_SIGNAL_HANDLING=y
FREETZ_BUSYBOX_DF=y
FREETZ_BUSYBOX_DIRNAME=y
FREETZ_BUSYBOX_DU=y
FREETZ_BUSYBOX_FEATURE_DU_DEFAULT_BLOCKSIZE_1K=y
FREETZ_BUSYBOX_ECHO=y
FREETZ_BUSYBOX_FEATURE_FANCY_ECHO=y
FREETZ_BUSYBOX_ENV=y
FREETZ_BUSYBOX_EXPR=y
FREETZ_BUSYBOX_FALSE=y
FREETZ_BUSYBOX_HEAD=y
FREETZ_BUSYBOX_FEATURE_FANCY_HEAD=y
FREETZ_BUSYBOX_LN=y
FREETZ_BUSYBOX_LS=y
FREETZ_BUSYBOX_FEATURE_LS_FILETYPES=y
FREETZ_BUSYBOX_FEATURE_LS_FOLLOWLINKS=y
FREETZ_BUSYBOX_FEATURE_LS_RECURSIVE=y
FREETZ_BUSYBOX_FEATURE_LS_SORTFILES=y
FREETZ_BUSYBOX_FEATURE_LS_TIMESTAMPS=y
FREETZ_BUSYBOX_FEATURE_LS_USERNAME=y
FREETZ_BUSYBOX_MD5SUM=y
FREETZ_BUSYBOX_MKDIR=y
FREETZ_BUSYBOX_MKFIFO=y
FREETZ_BUSYBOX_MKNOD=y
FREETZ_BUSYBOX_MV=y
FREETZ_BUSYBOX_NOHUP=y
FREETZ_BUSYBOX_PRINTF=y
FREETZ_BUSYBOX_PWD=y
FREETZ_BUSYBOX_REALPATH=y
FREETZ_BUSYBOX_RM=y
FREETZ_BUSYBOX_RMDIR=y
FREETZ_BUSYBOX_SLEEP=y
FREETZ_BUSYBOX_FEATURE_FANCY_SLEEP=y
FREETZ_BUSYBOX_SORT=y
FREETZ_BUSYBOX_STAT=y
FREETZ_BUSYBOX_FEATURE_STAT_FORMAT=y
FREETZ_BUSYBOX_STTY=y
FREETZ_BUSYBOX_SYNC=y
FREETZ_BUSYBOX_TAIL=y
FREETZ_BUSYBOX_FEATURE_FANCY_TAIL=y
FREETZ_BUSYBOX_TEE=y
FREETZ_BUSYBOX_FEATURE_TEE_USE_BLOCK_IO=y
FREETZ_BUSYBOX_TRUE=y
FREETZ_BUSYBOX_TTY=y
FREETZ_BUSYBOX_UNAME=y
FREETZ_BUSYBOX_USLEEP=y
FREETZ_BUSYBOX_UUDECODE=y
FREETZ_BUSYBOX_UUENCODE=y
FREETZ_BUSYBOX_WC=y
FREETZ_BUSYBOX_YES=y
FREETZ_BUSYBOX_FEATURE_AUTOWIDTH=y
FREETZ_BUSYBOX_FEATURE_HUMAN_READABLE=y
FREETZ_BUSYBOX_WHICH=y
FREETZ_BUSYBOX_VI=y
FREETZ_BUSYBOX_FEATURE_VI_MAX_LEN=1024
FREETZ_BUSYBOX_FEATURE_VI_8BIT=y
FREETZ_BUSYBOX_FEATURE_VI_COLON=y
FREETZ_BUSYBOX_FEATURE_VI_YANKMARK=y
FREETZ_BUSYBOX_FEATURE_VI_SEARCH=y
FREETZ_BUSYBOX_FEATURE_VI_USE_SIGNALS=y
FREETZ_BUSYBOX_FEATURE_VI_DOT_CMD=y
FREETZ_BUSYBOX_FEATURE_VI_READONLY=y
FREETZ_BUSYBOX_FEATURE_VI_SETOPTS=y
FREETZ_BUSYBOX_FEATURE_VI_SET=y
FREETZ_BUSYBOX_FEATURE_VI_WIN_RESIZE=y
FREETZ_BUSYBOX_FEATURE_VI_ASK_TERMINAL=y
FREETZ_BUSYBOX_AWK=y
FREETZ_BUSYBOX_SED=y
FREETZ_BUSYBOX_FEATURE_ALLOW_EXEC=y
FREETZ_BUSYBOX_FIND=y
FREETZ_BUSYBOX_FEATURE_FIND_PRINT0=y
FREETZ_BUSYBOX_FEATURE_FIND_MTIME=y
FREETZ_BUSYBOX_FEATURE_FIND_MMIN=y
FREETZ_BUSYBOX_FEATURE_FIND_PERM=y
FREETZ_BUSYBOX_FEATURE_FIND_TYPE=y
FREETZ_BUSYBOX_FEATURE_FIND_XDEV=y
FREETZ_BUSYBOX_FEATURE_FIND_MAXDEPTH=y
FREETZ_BUSYBOX_FEATURE_FIND_NEWER=y
FREETZ_BUSYBOX_FEATURE_FIND_INUM=y
FREETZ_BUSYBOX_FEATURE_FIND_EXEC=y
FREETZ_BUSYBOX_FEATURE_FIND_USER=y
FREETZ_BUSYBOX_FEATURE_FIND_GROUP=y
FREETZ_BUSYBOX_FEATURE_FIND_NOT=y
FREETZ_BUSYBOX_FEATURE_FIND_DEPTH=y
FREETZ_BUSYBOX_FEATURE_FIND_PAREN=y
FREETZ_BUSYBOX_FEATURE_FIND_SIZE=y
FREETZ_BUSYBOX_FEATURE_FIND_PRUNE=y
FREETZ_BUSYBOX_FEATURE_FIND_PATH=y
FREETZ_BUSYBOX_FEATURE_FIND_REGEX=y
FREETZ_BUSYBOX_GREP=y
FREETZ_BUSYBOX_FEATURE_GREP_EGREP_ALIAS=y
FREETZ_BUSYBOX_FEATURE_GREP_FGREP_ALIAS=y
FREETZ_BUSYBOX_FEATURE_GREP_CONTEXT=y
FREETZ_BUSYBOX_XARGS=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_CONFIRMATION=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_QUOTES=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_TERMOPT=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_ZERO_TERM=y
FREETZ_BUSYBOX_HALT=y
FREETZ_BUSYBOX_INIT=y
FREETZ_BUSYBOX_FEATURE_USE_INITTAB=y
FREETZ_BUSYBOX_FEATURE_KILL_REMOVED=y
FREETZ_BUSYBOX_FEATURE_KILL_DELAY=0
FREETZ_BUSYBOX_FEATURE_INIT_SYSLOG=y
FREETZ_BUSYBOX_INIT_TERMINAL_TYPE="linux"
FREETZ_BUSYBOX_FEATURE_SHADOWPASSWDS=y
FREETZ_BUSYBOX_USE_BB_CRYPT=y
FREETZ_BUSYBOX_ADDUSER=y
FREETZ_BUSYBOX_FIRST_SYSTEM_ID=100
FREETZ_BUSYBOX_LAST_SYSTEM_ID=999
FREETZ_BUSYBOX_ADDGROUP=y
FREETZ_BUSYBOX_FEATURE_ADDUSER_TO_GROUP=y
FREETZ_BUSYBOX_DELUSER=y
FREETZ_BUSYBOX_DELGROUP=y
FREETZ_BUSYBOX_FEATURE_DEL_USER_FROM_GROUP=y
FREETZ_BUSYBOX_LOGIN=y
FREETZ_BUSYBOX_PASSWD=y
FREETZ_BUSYBOX_FEATURE_PASSWD_WEAK_CHECK=y
FREETZ_BUSYBOX_CRYPTPW=y
FREETZ_BUSYBOX_FEATURE_DEFAULT_PASSWD_ALGO="des"
FREETZ_BUSYBOX_INSMOD=y
FREETZ_BUSYBOX_RMMOD=y
FREETZ_BUSYBOX_LSMOD=y
FREETZ_BUSYBOX_FEATURE_LSMOD_PRETTY_2_6_OUTPUT=y
FREETZ_BUSYBOX_MODPROBE=y
FREETZ_BUSYBOX_FEATURE_CHECK_TAINTED_MODULE=y
FREETZ_BUSYBOX_DEFAULT_MODULES_DIR="/lib/modules"
FREETZ_BUSYBOX_DEFAULT_DEPMOD_FILE="modules.dep"
FREETZ_BUSYBOX_BLKID=y
FREETZ_BUSYBOX_FEATURE_BLKID_TYPE=y
FREETZ_BUSYBOX_DMESG=y
FREETZ_BUSYBOX_FEATURE_DMESG_PRETTY=y
FREETZ_BUSYBOX_GETOPT=y
FREETZ_BUSYBOX_FEATURE_GETOPT_LONG=y
FREETZ_BUSYBOX_HEXDUMP=y
FREETZ_BUSYBOX_MKSWAP=y
FREETZ_BUSYBOX_MOUNT=y
FREETZ_BUSYBOX_FEATURE_MOUNT_VERBOSE=y
FREETZ_BUSYBOX_FEATURE_MOUNT_NFS=y
FREETZ_BUSYBOX_FEATURE_MOUNT_CIFS=y
FREETZ_BUSYBOX_FEATURE_MOUNT_FLAGS=y
FREETZ_BUSYBOX_FEATURE_MOUNT_FSTAB=y
FREETZ_BUSYBOX_PIVOT_ROOT=y
FREETZ_BUSYBOX_SWAPONOFF=y
FREETZ_BUSYBOX_UMOUNT=y
FREETZ_BUSYBOX_FEATURE_UMOUNT_ALL=y
FREETZ_BUSYBOX_FEATURE_MOUNT_LOOP=y
FREETZ_BUSYBOX_FEATURE_MOUNT_LOOP_CREATE=y
FREETZ_BUSYBOX_VOLUMEID=y
FREETZ_BUSYBOX_FEATURE_VOLUMEID_FAT=y
FREETZ_BUSYBOX_CROND=y
FREETZ_BUSYBOX_FEATURE_CROND_DIR="/var/spool/cron"
FREETZ_BUSYBOX_CRONTAB=y
FREETZ_BUSYBOX_MAKEDEVS=y
FREETZ_BUSYBOX_FEATURE_MAKEDEVS_TABLE=y
FREETZ_BUSYBOX_NC=y
FREETZ_BUSYBOX_NC_EXTRA=y
FREETZ_BUSYBOX_PING=y
FREETZ_BUSYBOX_FEATURE_FANCY_PING=y
FREETZ_BUSYBOX_STUN_IP=y
FREETZ_BUSYBOX_WHOIS=y
FREETZ_BUSYBOX_BRCTL=y
FREETZ_BUSYBOX_ETHER_WAKE=y
FREETZ_BUSYBOX_HOSTNAME=y
FREETZ_BUSYBOX_HTTPD=y
FREETZ_BUSYBOX_FEATURE_HTTPD_BASIC_AUTH=y
FREETZ_BUSYBOX_FEATURE_HTTPD_AUTH_MD5=y
FREETZ_BUSYBOX_FEATURE_HTTPD_CGI=y
FREETZ_BUSYBOX_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR=y
FREETZ_BUSYBOX_FEATURE_HTTPD_ENCODE_URL_STR=y
FREETZ_BUSYBOX_IFCONFIG=y
FREETZ_BUSYBOX_FEATURE_IFCONFIG_STATUS=y
FREETZ_BUSYBOX_FEATURE_IFCONFIG_HW=y
FREETZ_BUSYBOX_FEATURE_IFCONFIG_BROADCAST_PLUS=y
FREETZ_BUSYBOX_IFUPDOWN=y
FREETZ_BUSYBOX_IFUPDOWN_IFSTATE_PATH="/var/run/ifstate"
FREETZ_BUSYBOX_FEATURE_IFUPDOWN_IFCONFIG_BUILTIN=y
FREETZ_BUSYBOX_FEATURE_IFUPDOWN_IPV4=y
FREETZ_BUSYBOX_FEATURE_IFUPDOWN_MAPPING=y
FREETZ_BUSYBOX_INETD=y
FREETZ_BUSYBOX_NETSTAT=y
FREETZ_BUSYBOX_FEATURE_NETSTAT_PRG=y
FREETZ_BUSYBOX_ROUTE=y
FREETZ_BUSYBOX_TELNETD=y
FREETZ_BUSYBOX_FEATURE_TELNETD_STANDALONE=y
FREETZ_BUSYBOX_VCONFIG=y
FREETZ_BUSYBOX_WGET=y
FREETZ_BUSYBOX_FEATURE_WGET_TIMEOUT=y
FREETZ_BUSYBOX_TOP=y
FREETZ_BUSYBOX_FEATURE_TOP_CPU_USAGE_PERCENTAGE=y
FREETZ_BUSYBOX_FEATURE_TOP_CPU_GLOBAL_PERCENTS=y
FREETZ_BUSYBOX_UPTIME=y
FREETZ_BUSYBOX_FREE=y
FREETZ_BUSYBOX_KILL=y
FREETZ_BUSYBOX_KILLALL=y
FREETZ_BUSYBOX_PIDOF=y
FREETZ_BUSYBOX_FEATURE_PIDOF_SINGLE=y
FREETZ_BUSYBOX_FEATURE_PIDOF_OMIT=y
FREETZ_BUSYBOX_PS=y
FREETZ_BUSYBOX_FEATURE_PS_WIDE=y
FREETZ_BUSYBOX_FEATURE_PS_LONG=y
FREETZ_BUSYBOX_BB_SYSCTL=y
FREETZ_BUSYBOX_ASH=y
FREETZ_BUSYBOX_ASH_BASH_COMPAT=y
FREETZ_BUSYBOX_ASH_JOB_CONTROL=y
FREETZ_BUSYBOX_ASH_ALIAS=y
FREETZ_BUSYBOX_ASH_GETOPTS=y
FREETZ_BUSYBOX_ASH_BUILTIN_ECHO=y
FREETZ_BUSYBOX_ASH_BUILTIN_PRINTF=y
FREETZ_BUSYBOX_ASH_BUILTIN_TEST=y
FREETZ_BUSYBOX_ASH_CMDCMD=y
FREETZ_BUSYBOX_ASH_OPTIMIZE_FOR_SIZE=y
FREETZ_BUSYBOX_ASH_EXPAND_PRMT=y
FREETZ_BUSYBOX_FEATURE_SH_IS_ASH=y
FREETZ_BUSYBOX_FEATURE_BASH_IS_NONE=y
FREETZ_BUSYBOX_SH_MATH_SUPPORT=y
FREETZ_BUSYBOX_FEATURE_SH_STANDALONE=y
FREETZ_BUSYBOX_FEATURE_SH_NOFORK=y
FREETZ_BUSYBOX_SYSLOGD=y
FREETZ_BUSYBOX_FEATURE_ROTATE_LOGFILE=y
FREETZ_BUSYBOX_FEATURE_REMOTE_LOG=y
FREETZ_BUSYBOX_FEATURE_SYSLOGD_DUP=y
FREETZ_BUSYBOX_FEATURE_SYSLOGD_READ_BUFFER_SIZE=256
FREETZ_BUSYBOX_FEATURE_IPC_SYSLOG=y
FREETZ_BUSYBOX_FEATURE_IPC_SYSLOG_BUFFER_SIZE=16
FREETZ_BUSYBOX_LOGREAD=y
FREETZ_BUSYBOX_FEATURE_LOGREAD_REDUCED_LOCKING=y
FREETZ_BUSYBOX_KLOGD=y
FREETZ_BUSYBOX_FEATURE_KLOGD_KLOGCTL=y
FREETZ_BUSYBOX_LOGGER=y
EXTERNAL_ENABLED=y
EXTERNAL_SUBDIRS=y
EXTERNAL_CREATEPAK=y
EXTERNAL_OWN_FILES=""
EXTERNAL_FREETZ_PACKAGE_WOL=y
EXTERNAL_FREETZ_PACKAGE_DROPBEAR=y
EXTERNAL_FREETZ_PACKAGE_OPENVPN=y
EXTERNAL_FREETZ_PACKAGE_VSFTPD=y
EXTERNAL_FREETZ_PACKAGE_CIFSMOUNT=y
EXTERNAL_FREETZ_LIB_libcrypto=y
EXTERNAL_FREETZ_LIB_libssl=y
EXTERNAL_FREETZ_LIB_liblzo2=y
FREETZ_LANG_DE=y
FREETZ_LANG_STRING="de"
FREETZ_SECURITY_LEVEL=1
FREETZ_STYLE_GREY=y
FREETZ_STYLE="grey"
FREETZ_SKIN_legacy=y
FREETZ_SKIN_newfreetz=y
FREETZ_SKIN_phoenix=y
FREETZ_FAVICON_HANSOLO=y
FREETZ_FAVICON_STRING="hansolo"
FREETZ_TAGGING_NONE=y
FREETZ_TAGGING_STRING="none"
FREETZ_USER_DEFINED_COMMENT=""
FREETZ_CREATE_SEPARATE_OPTIONS_CFG=y
FREETZ_DOWNLOAD_TOOLCHAIN=y
FREETZ_GCC_3_4_COMPILED_KERNEL=y
FREETZ_UCLIBC_0_9_29_BASED_BOX=y
FREETZ_KERNEL_BINUTILS_2_18=y
FREETZ_KERNEL_COMPILER_GCC_3_4=y
FREETZ_KERNEL_BINUTILS_VERSION="2.18"
FREETZ_KERNEL_GCC_VERSION="3.4.6"
FREETZ_TARGET_UCLIBC_VERSION_0_9_29=y
FREETZ_TARGET_BINUTILS_2_22=y
FREETZ_TARGET_COMPILER_GCC_4_6=y
FREETZ_STDCXXLIB_USE_UCLIBCXX=y
FREETZ_TARGET_UCLIBC_VERSION="0.9.29"
FREETZ_TARGET_BINUTILS_VERSION="2.22"
FREETZ_TARGET_GCC_VERSION="4.6.4"
FREETZ_GNULIBSTDCXX_VERSION="6.0.16"
FREETZ_STDCXXLIB="uclibcxx"
FREETZ_TARGET_UCLIBC_REF="mod"
FREETZ_TARGET_CFLAGS="-Os -pipe -Wa,--trap"
FREETZ_TARGET_UCLIBC_REDUCED_LOCALE_SET=y
FREETZ_TARGET_LFS=y
FREETZ_TOOLCHAIN_MINIMIZE_REQUIRED_GLIBC_VERSION=y
FREETZ_VERBOSITY_LEVEL=0
FREETZ_SIZEINFO_COMPRESSED=y
FREETZ_JLEVEL=2
FREETZ_CHECK_CHANGED=y
FREETZ_STRIP_BINARIES=y
FREETZ_STRIP_MODULES_FREETZ=y
FREETZ_DL_SITE_USER=""
FREETZ_DL_TOOLCHAIN_SITE=""
FREETZ_DL_KERNEL_TOOLCHAIN_VERSION="r10381"
FREETZ_DL_KERNEL_TOOLCHAIN_MD5="bef1bfcad26bca350267f85ad4ec334b"
FREETZ_DL_TARGET_TOOLCHAIN_VERSION="r10381"
FREETZ_DL_TARGET_TOOLCHAIN_MD5="62768ca3fad99fcc052a792190aff882"
FREETZ_DL_TOOLCHAIN_SUFFIX="shared-glibc"
FREETZ_DL_KERNEL_SITE=""
FREETZ_DL_KERNEL_SOURCE="7170_04.87-release_kernel.tar.xz"
FREETZ_DL_KERNEL_SOURCE_MD5="a673a5facbaf1fe8dce9144a05dfaf88"
FREETZ_DL_SITE="@AVM/fritzbox.fon_wlan_7170/firmware/deutsch"
FREETZ_DL_SOURCE="FRITZ.Box_Fon_WLAN_7170.29.04.87.image"
FREETZ_DL_SOURCE_MD5="2442ffb2be983cdd0b4b4ceaa6825f4d"
FREETZ_REPLACE_KERNEL_AVAILABLE=y
FREETZ_REPLACE_MODULE_AVAILABLE=y
FREETZ_HAS_AVM_FW4XX=y
FREETZ_HAS_AVM_LANG_DE=y
FREETZ_HAS_AVM_LANG_A_CH=y
FREETZ_HAS_AVM_LANG_EN=y
FREETZ_HAS_AVM_PRINTK=y
FREETZ_HAS_AVM_PIGLET=y
FREETZ_HAS_AVM_PTY_SUPPORT=y
FREETZ_HAS_AVM_AURA_USB=y
FREETZ_HAS_AVM_MINID=y
FREETZ_HAS_AVM_INETD=y
FREETZ_HAS_AVM_ISOFS=y
FREETZ_HAS_AVM_TR069=y
FREETZ_HAS_AVM_TR069_FWUPDATE=y
FREETZ_HAS_AVM_OPENSSL_LIBS=y
FREETZ_HAS_AVM_PHONE=y
FREETZ_HAS_AVM_TAM=y
FREETZ_HAS_AVM_USB_HOST=y
FREETZ_HAS_AVM_USB_HOST_AHCI=y
FREETZ_HAS_AVM_WLAN=y
FREETZ_HAS_AVM_JFFS2=y
FREETZ_HAS_AVM_MICROVOIP_DSL=y
FREETZ_INSTALL_BASE=y
FREETZ_REPLACE_BUSYBOX=y
FREETZ_TARGET_ARCH_LE=y
FREETZ_TARGET_ARCH="mipsel"
FREETZ_TARGET_CROSS="mipsel-linux-uclibc-"
FREETZ_TARGET_MAKE_PATH="toolchain/target/bin"
FREETZ_KERNEL_CROSS="mipsel-unknown-linux-gnu-"
FREETZ_KERNEL_MAKE_PATH="toolchain/kernel/bin"
FREETZ_FILESYSTEM_MTD_SIZE=0
FREETZ_AVM_VERSION_04_87=y
FREETZ_AVM_VERSION_04_XX=y
FREETZ_AVM_VERSION_STRING="04.87"
FREETZ_TYPE_PREFIX="7170"
FREETZ_TYPE_PREFIX_SERIES_SUBDIR="04_XX"

 

[JohnDoe42]

Dass sich die Module in Deinem Build-System befinden bedeutet ja nicht zwangsläufig, dass sie auch im Image/auf der Box/geladen sind.
Was ergibt denn ein

lsmod ipt_state

auf der Box ?

 

[RalfFriedl]

Wenn ich hier nachschaue, scheint ist_MASQUERADE schon installiert zu sein?

Du meinst ipt_MASQUERADE. Ja, sieht aus, als wäre es auf der Box. In #18 steht aber, dass es nicht in modules.dep vorhanden sei. Ich sehe aber gerade, Du hast dort das U in ipt_MASQERADE vergessen. Versuch es also nochmal mit dem richtigen Namen.

PS:
Bitte ändere noch in #20 das QUOTE in CODE, das ist besser lesbar.

 

[sonny_luke]

Hallo JohnDoe42, hallo Ralf

lsmod ipt_state Ergebnis anbei, ebenso modprobe ipt_MASQUERADE:

root@AWEfritz:/var/mod/root# modprobe ipt_MASQUERADE
root@AWEfritz:/var/mod/root# lsmod ipt_state
Module                  Size  Used by    Tainted: P  
ipt_MASQUERADE          1152  0 
iptable_nat            16176  1 ipt_MASQUERADE
ip_conntrack           30320  2 ipt_MASQUERADE,iptable_nat
userman_mod            30544  2 
sch_sfq                 3968  4 
sch_llq                 6624  1 
sch_tbf                 3936  1 
ip_tables              17920  2 ipt_MASQUERADE,iptable_nat
nls_cp437               4352  1 
nls_iso8859_1           2816  1 
usb_storage            23248  1 
sd_mod                 11312  2 
kdsldmod              769712  7 userman_mod
usbahcicore            21424  0 
usbcore                86928  3 usb_storage,usbahcicore
capi_codec            240768  0 
isdn_fbox_fon4        867888  5 capi_codec
ubik2                  69248  2 capi_codec,isdn_fbox_fon4
tiatm                  91440  1 ubik2
jffs2                  94752  0 
Piglet                  5216  0 
vfat                    8640  1 
fat                    40048  1 vfat
scsi_mod               65872  2 usb_storage,sd_mod
ext2                   48544  0 
mbcache                 5424  1 ext2
root@AWEfritz:/var/mod/root#

ipt_state ist also nicht vorhanden, ipt_MASQUERADE jetzt auch sichtbar, nachdem ich es mit modprobe geladen habe, richtig?

 

[RalfFriedl]

ipt_MASQUERADE ist jetzt auf jeden Fall da.
Kannst Du jetzt die iptables Regel in der Kommandozeile anlegen?

iptables -t nat -F
iptables -t nat -A POSTROUTING -o dsl -j MASQUERADE
iptables -t nat -vnL

 

[sonny_luke]

Das scheint jetzt funktioniert zu haben:

root@AWEfritz:/var/tmp# iptables -t nat -F
root@AWEfritz:/var/tmp# iptables -t nat -A POSTROUTING -o dsl -j MASQUERADE
root@AWEfritz:/var/tmp# iptables -t nat -vnL
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      dsl     0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

 

[RalfFriedl]

Ja, das sieht gut aus. Jetzt kannst Du ausprobieren, ob es auch über das VPN funktioniert. Ich sehe gerade, das passt das Interface nicht.
Nimm also

iptables -t nat -F
iptables -t nat -A POSTROUTING -o tun+ -j MASQUERADE
iptables -t nat -vnL POSTROUTING

Mit der letzten Zeile wird nur POSTROUTING angezeigt. Wenn Du nur diese Zeile eingibst und die Regel auch tatsächlich angesprochen wurde, sollte in den ersten beiden Spalten nicht mehr 0 stehen, sondern größere Werte.

 

[sonny_luke]

Das sieht schon viel besser aus...

Nach der manuellen iptables Einrichtung habe ich auch openvpn manuell gestartet.

root@AWEfritz:/var/tmp/flash# iptables -t nat -F
root@AWEfritz:/var/tmp/flash# iptables -t nat -A POSTROUTING -o tun+ -j MASQUERADE
root@AWEfritz:/var/tmp/flash# iptables -t nat -vnL POSTROUTING
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      tun+    0.0.0.0/0            0.0.0.0/0           
root@AWEfritz:/var/tmp/flash# openvpn --config swissvpn.ovpn 
Fri Nov  1 05:52:26 2013 OpenVPN 2.3.1 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [IPv6] built on Oct 27 2013
Fri Nov  1 05:52:26 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Nov  1 05:52:26 2013 Attempting to establish TCP connection with [AF_INET]80.254.79.101:443 [nonblock]
Fri Nov  1 05:52:27 2013 TCP connection established with [AF_INET]80.254.79.101:443
Fri Nov  1 05:52:27 2013 TCPv4_CLIENT link local: [undef]
Fri Nov  1 05:52:27 2013 TCPv4_CLIENT link remote: [AF_INET]80.254.79.101:443
Fri Nov  1 05:52:27 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Nov  1 05:52:28 2013 [server] Peer Connection Initiated with [AF_INET]80.254.79.101:443
Fri Nov  1 05:52:31 2013 TUN/TAP device tun0 opened
Fri Nov  1 05:52:31 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Nov  1 05:52:31 2013 /sbin/ifconfig tun0 93.94.245.69 netmask 255.255.255.128 mtu 1500 broadcast 93.94.245.127
route: SIOCADDRT: File exists
Fri Nov  1 05:52:31 2013 [COLOR="#FF0000"]ERROR: Linux route add command failed: external program exited with error status: 1[/COLOR]
Fri Nov  1 05:52:31 2013 Initialization Sequence Completed

Den Fehler 'ERROR: Linux route add command failed: external program exited with error status: 1' hatte ich allerdings vorher noch nicht.

Wenn ich nun auf die swissvpn.net Seite gehe, sehe ich im Status, dass der VPN-Tunnel aktiv ist. Irgendeine Idee, wie ich das sonst noch einfach überprüfen könnte (z.B. traceroute etc.?)

Final müsste ich dann noch schauen, wie ich das "sauber" über die freetz-Oberfläche gemanaged bekomme, d.h. das iptables und openvpn automatisch starten (auch nach dem täglichen re-connect zum Provider) und vor allem ohne Fehler
Bei OpenVPN gibt es für die Client-Einstellung noch viele Optionen. Ich nehme aber mal an, dass ich die durch den manuellen Workaround mit dem Scripting ignorieren kann, oder?

 

[RalfFriedl]

Die iptables kann man beim Start der Box laden, die gehen beim Reconnect nicht verloren.

Die Adresse 93.94.245.69 gehört zu swissvpn.net, das sieht schon mal gut aus.
Die Meldung besagt, dass das route Kommando einen Fehler lieferte, aber es wird nicht angezeigt, welches route Kommando ausgeführt wurde. Wie sehen denn die Routen aus, vorher und nachher?
Letztlich brauchst Du einen Route über DSL zum VPN Provider und eine Default Route auf den VPN Tunnel.
Was wird angezeigt, wenn Du verb auf 2 oder 3 setzt? An der Kommandozeile --verb 2 oder --verb 3.