Messages

1

Virtual private networks / Re: ProtonVPN + Wireguard + NAT-PMP

« on: August 16, 2024, 08:00:32 pm »

I was able to set up ProtonVPN Port Forwarding, but it's by using the manual steps listed for MacOS on the ProtonVPN site, https://protonvpn.com/support/port-forwarding-manual-setup/#macos.

I'm on Windows, but since Python is platform agnostic I was able to leverage the same commands for setting the Port from my PC, and I just run the loop command whenever I want to Port Forward.

For firewall setup, I added a NAT Port Forward rule from the VPN_WAN interface to my PC, and then set a local tag called "PORT_FORWARD_VPN". Then, I added a Floating Rule with Match local tag set to the previously mentioned tag, and also reply-to set to the VPN gateway (I was having issues with inbound traffic from the VPN having reply-to go out the WAN gateway).

Hey @ssalvato

I got around to testing this out, I can't seem to get it to work. Would you mind taking a few snapshots of how you got your floating rule setup? Did you follow the wireguard roadrunner opnsense guide? Assuming you are using wireguard?

Thanks

Hi @opnooz,

I followed the ProtonVPN specific WireGuard road warrior guide: https://docs.opnsense.org/manual/how-tos/wireguard-client-proton.html

See my attachments for the floating rules and the port forwarding advanced details.

2

Virtual private networks / Re: ProtonVPN + Wireguard + NAT-PMP

« on: May 19, 2024, 03:52:42 am »

I was able to set up ProtonVPN Port Forwarding, but it's by using the manual steps listed for MacOS on the ProtonVPN site, https://protonvpn.com/support/port-forwarding-manual-setup/#macos.

I'm on Windows, but since Python is platform agnostic I was able to leverage the same commands for setting the Port from my PC, and I just run the loop command whenever I want to Port Forward.

For firewall setup, I added a NAT Port Forward rule from the VPN_WAN interface to my PC, and then set a local tag called "PORT_FORWARD_VPN". Then, I added a Floating Rule with Match local tag set to the previously mentioned tag, and also reply-to set to the VPN gateway (I was having issues with inbound traffic from the VPN having reply-to go out the WAN gateway).