Another OpenVPN Struggle

[marsch]

I have tried setting up OpenVPN several times with no luck.  I have tried the built in wizard, following different guides, but can never get connected.  For whatever reason my connection keeps hitting the default deny rule.  I dont know what what I am missing.

[Fright]

any rdr-rules that may affect traffic for openvpn port?

[marsch]

any rdr-rules that may affect traffic for openvpn port?

Unless they are automatically created, I dont think so.  Where would I look to see?

[Fright]

Firewall: NAT: Port Forward
can you please click i button in live view record for this "default deny" records and share the detailed rule info?

[marsch]

Firewall: NAT: Port Forward
can you please click i button in live view record for this "default deny" records and share the detailed rule info?

Here is the full log of the deny rule.

[Fright]

rather strange entries in the live log and in the "detailed info" (it seems to me) -expected to see a little different things for rdr-rules but..
could you show the rules from Firewall: NAT: Port Forward ?

[marsch]

rather strange entries in the live log and in the "detailed info" (it seems to me) -expected to see a little different things for rdr-rules but..
could you show the rules from Firewall: NAT: Port Forward ?

Currently I dont have any Port Forwards for OpenVPN.  Is that my problem?  The only Port Forwards I have are for plex, and a reverse proxy.  I can still send you screen shots if you would like.

[RamSense]

@marsch
when adding openvpn in opnsense by the wizard, you probably should she a rule under firewall rules.
Not under NAT portforward but under
firewall->rules->WAN:
Protocol (IPv4 UDP)- Source (*)-   Port (*)- Destination (Wan address)- Port ("Your OpenVPN port number")- Gateway (*)- Schedule (*)

If it is not yet there, add it.

[Fright]

Currently I dont have any Port Forwards for OpenVPN.  Is that my problem?

no. it just shouldn't be. but live log shows that the packet is being processed by the rdr-rule hich shouldn't be. trying to understand why

I can still send you screen shots if you would like

yes, please