I have tried setting up OpenVPN several times with no luck. I have tried the built in wizard, following different guides, but can never get connected. For whatever reason my connection keeps hitting the default deny rule. I dont know what what I am missing.
any rdr-rules that may affect traffic for openvpn port?
Quote from: Fright on July 30, 2021, 05:37:30 PM
any rdr-rules that may affect traffic for openvpn port?
Unless they are automatically created, I dont think so. Where would I look to see?
Firewall: NAT: Port Forward
can you please click i button in live view record for this "default deny" records and share the detailed rule info?
Quote from: Fright on July 30, 2021, 07:25:13 PM
Firewall: NAT: Port Forward
can you please click i button in live view record for this "default deny" records and share the detailed rule info?
Here is the full log of the deny rule.
rather strange entries in the live log and in the "detailed info" (it seems to me) -expected to see a little different things for rdr-rules but..
could you show the rules from Firewall: NAT: Port Forward ?
Quote from: Fright on July 31, 2021, 11:57:17 AM
rather strange entries in the live log and in the "detailed info" (it seems to me) -expected to see a little different things for rdr-rules but..
could you show the rules from Firewall: NAT: Port Forward ?
Currently I dont have any Port Forwards for OpenVPN. Is that my problem? The only Port Forwards I have are for plex, and a reverse proxy. I can still send you screen shots if you would like.
@marsch
when adding openvpn in opnsense by the wizard, you probably should she a rule under firewall rules.
Not under NAT portforward but under
firewall->rules->WAN:
Protocol (IPv4 UDP)- Source (*)- Port (*)- Destination (Wan address)- Port ("Your OpenVPN port number")- Gateway (*)- Schedule (*)
If it is not yet there, add it.
QuoteCurrently I dont have any Port Forwards for OpenVPN. Is that my problem?
no. it just shouldn't be. but live log shows that the packet is being processed by the rdr-rule hich shouldn't be. trying to understand why
QuoteI can still send you screen shots if you would like
yes, please