Re: client

le iptables sur le serveur OpenVPN 192.168.200.121 me donnent :

iptables-save
# Generated by iptables-save v1.3.5 on Thu Sep 16 16:56:00 2010
*mangle
:PREROUTING ACCEPT [24615602:4550357521]
:INPUT ACCEPT [17461124:2996140164]
:FORWARD ACCEPT [7154241:1554196550]
:OUTPUT ACCEPT [8970289:1694975517]
:POSTROUTING ACCEPT [14543623:3129211108]
COMMIT
# Completed on Thu Sep 16 16:56:00 2010
# Generated by iptables-save v1.3.5 on Thu Sep 16 16:56:00 2010
*nat
:PREROUTING ACCEPT [12983423:1275834034]
:POSTROUTING ACCEPT [179381:14969976]
:OUTPUT ACCEPT [124404:8304961]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 128.2.30.30:3389
-A POSTROUTING -o eth0 -j MASQUERADE
-A POSTROUTING -d 128.2.30.30 -p tcp -m tcp --dport 3389 -j SNAT --to-source 128.2.1.205
-A POSTROUTING -o eth0 -j MASQUERADE
-A POSTROUTING -o tun0 -j MASQUERADE
COMMIT
# Completed on Thu Sep 16 16:56:00 2010
# Generated by iptables-save v1.3.5 on Thu Sep 16 16:56:00 2010
*filter
:INPUT DROP [1:128]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [7148764:1397756758]
:block - [0:0]
-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
-A INPUT -j block
-A INPUT -p tcp -m tcp --dport 137 -m state --state NEW -j ACCEPT
-A INPUT -p udp -m udp --dport 137 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m tcp --dport 138 -m state --state NEW -j ACCEPT
-A INPUT -p udp -m udp --dport 138 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m tcp --dport 139 -m state --state NEW -j ACCEPT
-A INPUT -p udp -m udp --dport 139 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m tcp --dport 445 -m state --state NEW -j ACCEPT
-A INPUT -p udp -m udp --dport 445 -m state --state NEW -j ACCEPT
-A FORWARD -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
-A FORWARD -j block
-A FORWARD -p tcp -m tcp --dport 137 -m state --state NEW -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 138 -m state --state NEW -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 139 -m state --state NEW -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 445 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 445 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 139 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 138 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 137 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 137 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 137 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 138 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 138 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 139 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 139 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 445 -m state --state NEW -j ACCEPT
-A FORWARD -p udp -m udp --dport 445 -m state --state NEW -j ACCEPT
-A FORWARD -i tun0 -o eth0 -j ACCEPT
-A FORWARD -i eth0 -o tun0 -j ACCEPT
-A block -m state --state INVALID -j DROP
-A block -m state --state RELATED,ESTABLISHED -j ACCEPT
-A block -i ! eth0 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --sport 53 -j ACCEPT
-A block -i eth0 -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
-A block -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 22 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 79 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 79 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 113 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 113 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 143 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 143 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 3389 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 3389 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 6524 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 6524 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 80 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 80 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 1194 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 1195 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 6524 -m state --state NEW -j ACCEPT
-A block -j LOG --log-prefix "DENY TCP connect "
-A block -j DROP
-A block -p tcp -m tcp --dport 137 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 138 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 139 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 445 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 445 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 139 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 138 -m state --state NEW -j ACCEPT
-A block -p udp -m udp --dport 137 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 137 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 137 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 138 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 138 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 139 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 139 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 445 -m state --state NEW -j ACCEPT
-A block -p tcp -m tcp --dport 445 -m state --state NEW -j ACCEPT
COMMIT
# Completed on Thu Sep 16 16:56:00 2010

Pour moi je ne vois pas d'erreur?