OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: gh0st on November 28, 2017, 05:35:40 pm

Title: Forced to restart OpenVPN to get access to some sites!
Post by: gh0st on November 28, 2017, 05:35:40 pm
This has been going on for some while, and with no response from OVPN that is my provider for this I'll hope some ppl on the forum can sort this out...

It all ends up with err_connection_refused in Chrome for some sites, and even thou I have wiped the cache it still throws a err_connection_refused UNTIL i restart the OpenVPN service in OPNsense!  :o
Title: Re: Forced to restart OpenVPN to get access to some sites!
Post by: fabian on November 28, 2017, 05:39:53 pm
Sounds like a routing issue (maybe some route is set which overrides your OpenVPN gateway).
Title: Re: Forced to restart OpenVPN to get access to some sites!
Post by: gh0st on December 10, 2017, 02:21:05 pm
Nope, no route is set in OPNsense... :/
Title: Re: Forced to restart OpenVPN to get access to some sites!
Post by: Gargamel on December 10, 2017, 07:43:24 pm
This has been going on for some while, and with no response from OVPN that is my provider for this I'll hope some ppl on the forum can sort this out...

It all ends up with err_connection_refused in Chrome for some sites, and even thou I have wiped the cache it still throws a err_connection_refused UNTIL i restart the OpenVPN service in OPNsense!  :o

I think i used to have the same problem (using ovpn + public ip).
My issue was dns related, but then i got the related error tho.

Compare your config with mine, because current config i have had no problem since i installed it.

Code: [Select]
Server mode: peer to peer SSL/TLS
Protocol: UDP
Device Mode: tun
Interface: wan
remote server: vpn04.prd.kista.ovpn.com
retry dns resolution: checked infinitely resolve remote server
TLS auth: OpenVPN static key V1 from ovpn
Peer certificate authority: the ovpn provided cert
Client certificate: none (username password required)
encryption algorith: AES-256-GSM (256 bit key, 128 bit lock, TLS client/server)
auth digest algorithm: SHA1 (160-bit)
Hardware crypto: no hardware crypto acceleration
compression: enabled with adaptive compression
disable IPv6: checked

Advanced: persist-key
          persist-tun
          remote-cert-tls server
          key-direction 1
          reneg-sec 432000