Messages

1

24.7 Production Series / OpenVPN dropping traffic when using DCO

« on: August 19, 2024, 04:02:00 am »

I'm running into a strange issue where OpenVPN will inconsistently start dropping all traffic when running in DCO mode and using the VPN while connected on the local network, but always works in TUN mode. I haven't been able to pin down when or how it stops working, but notice it usually fails when the following appears in the log:

Failed to create interface ovpns1 (SIOCSIFNAME): File exists (errno=17)
DCO device ovpns1 already exists, won't be destroyed at shutdown

and ifconfig does not show the RUNNING flag for ovpns1. I've tried bringing the interface down before starting the server, but still get the above message.

Does anyone else have inconsistent issues when using DCO, but it otherwise works when in TUN mode?

2

23.1 Legacy Series / Re: OpenVPN not work after update OPNSense from 23.1.1_2->23.1.3

« on: March 16, 2023, 11:03:40 pm »

@ AdSchellevis, I've confirmed that the patch b5289522 fixed my problem with the client option 'static-challenge' failing. Thanks!

3

23.1 Legacy Series / Re: Upgrade from 23.1->23.1.3 kernel panic/crashing

« on: March 16, 2023, 10:58:48 pm »

My apologies, I posted to the wrong thread. Please delete if possible.

4

23.1 Legacy Series / Re: OpenVPN not work after update OPNSense from 23.1.1_2->23.1.3

« on: March 16, 2023, 05:02:45 am »

I appear to have the same problem as described in the previous posts as well using a password + TOTP + client certificate. However, I noticed that authentication failed with the error message:

WARNING: Failed running command (--auth-user-pass-verify): external program exited with error status: 1

when using the OpenVPN client option 'static-challenge', but worked when this option was not used and the TOTP was concatenated to the password instead. It would be nice to get the prompt for the TOTP code working again. My current assumption is that there is an issue with the /usr/local/opnsense/scripts/openvpn/user_pass_verify.php script since the 23.1.2 update.