[SOLVED] OpenVPN Broken

[Noctur]

Updated yesterday, tried to enable several prior OpenVPN clients and while they would indicate connected, no data comes through. Every attempted website returns not found. Note that connecting with TOR browser is successful.

Anyone else seen this?

How can I safely downgrade to the 17.7.12_1 version I was on until this gets sorted out? TIA.

[guest15389]

I'm using OpenVPN and it seems to work fine.

Are you passing any traffic through once you connect? Can you ping your DNS that you have setup?

[Noctur]

Thanks for the prompt reply,...

With a client profile enabled and from SSH to the console - yes pinged with 3 responses and 0 loss.

But, I had to disable the profile to respond to this question via Firefox browser. Browser was updated to 58.0.1 very recently.

[Noctur]

Attempting to downgrade with

# opnsense-revert -r 17.7.12 opnsense
or
# opnsense-revert -r 17.7.12_1 opnsense

results in

Fetching opnsense.txz: .. failed

Recommendations? TIA

[tibere86]

I'm having the same issue. I did a clean install of OPNsense 18.1 last night. In client mode, I could connect to PIA's VPN server (AES-256-CBC & SHA256), but could not route traffic. I troubleshot for about 10 minutes, then ran out of time. I'll do more troubleshooting tonight when I get home.

[Noctur]

Similar... Nord VPN here, tried several profiles that worked prior to the upgrade, checked server status, created 2 new profiles to new servers. All the same - get connection up indication, can't make browser connection with Firefox or IE.
Don't have time to troubleshoot more atm. So was trying to revert but that's not working.

Anyone have recommendations on how to downgrade back to 17.7.12? TIA

[slackadelic]

I use PIA and mine is working, but I'm not sure what difference with your network setup compared to mine is I'm afraid.

[guest15389]

I use OpenVPN to connect it to my home network and ExpressVPN as well for outbound traffic. Both are working without issue.

[Noctur]

Thanks for the comments, all. Looks like its something intermittent.

Any recommendations on how to downgrade? the command

# opnsense-revert

isn't working. Is there a different command between major revs? TIA

[k1ll3ry0]

Just updated mine to 8.1, I run a full network OpenVPN tunnel with alias bypasses for platforms like Netflix and Amazon Video. Upon updating I'm unable to connect to a number of sites like opnsense.org, privateinternetaccess.com, stackoverflow.com, Reddit, the list goes on but there's also a ton of sites that work too...I ended up restoring from backup with no positive outcome. Attributing this to OpenVPN as well because once disabled the network connects perfectly fine.

[franco]

Last one sounds like an MTU issue?

opnsense-revert isn't working because you can't cross major version borders easily. It's dangerous to downgrade, in fact I tried but pkg is refusing to downgrade in the sequence we try to upgrade after changing the version back to 17.7. FreeBSD likes to keep pkg incompatible between 11.x releases. Sorry.

Your best bet is to do a 17.7.5 image configuration import + guided install to replace your system inline while retaining the configuration.


Cheers,
Franco

[Noctur]

Thank you for confirming the major rev downgrade restriction. I had pretty much boiled it down to 2 choices - install 17.7.5 (the last available on download) and restore settings or clean install 18.1 and restore settings. I'll try the 18.1/restore first, and if it doesn't resolve I'll go with the 17.7.5/restore.

[Noctur]

Quick update... reinstalled 17.7.5, updated to 17.7.12_1, restored settings file. Everything working as expected. One note, I performed a factory reset on 18.1_1 and then restored setting file - same issue with OpenVPN. Went the reinstall route.

[k1ll3ry0]

That's such a bummer. I wonder what's causing the issue...Should have know not to upgrade so close to the release date. Hoping a hotfix comes around so I can retain my OpenVPN functionality because not using one skeeves me out a bit...

[namezero111111]

Could you please post, for bot working and non working the generated config file for openvpn?
That way we could determine if there is a difference in settings causing this. Thx!