The only thing that might be in there you want to redact should be pretty obvious ;) Say your public IP, or fqdn your connecting to..

@jim-coogan thank you my friend. seems watchdog is easier package for that purpose, allows to monitor active services by selection and monitors, restarts, and notify without commands. Looks like a good start. Thank you for your comments.

@gertjan hello Sir, I did some investigation and didn't find yet why the wan go down, though it never happent again. i'm thinking to implement a cron restart or watchdog for the services. Thanks for your comments, i really appreciate your help.

@ximulate The simple change that has worked for me so far: make sure "Do not check" is set on the server's certificate Depth Check option. This seems to bypass a potential bug with Certificate tests that can be pretty random seeming. May not solve your issue but probably won't hurt and helped me.

@jknott I set up the VPN from scratch and it worked. I then tried it again later and I get the hard resets again. Is there something that happens between connection attempts that kills it?

@zmaliz anyone have any ideas on this ? Thanks

I've got a similar issue: Apr 5 11:29:09 pfsense openvpn[66140]: Using peer cipher 'AES-256-CBC' Apr 5 11:29:09 pfsense openvpn[66140]: OpenSSL: error:0201502D:system library:ioctl:Operation not supported Apr 5 11:29:09 pfsense openvpn[66140]: EVP cipher init #2 Apr 5 11:29:09 pfsense openvpn[66140]: Exiting due to fatal erro I'm on 2.5.1.r.20210405.0300

@comfy Ok - so, got it working - an auth issue. So, the next question would be (that ive created an alias group of the devices i want to route through that connection - is there a walkthrough somewhere...?

@gertjan Yep I read that, great work! I no longer can test this myself as I no longer have the subscription to azirevpn where I was having the same issue as this entire thread, was just curious if it helped anyone

This is most likely due to NCP, I guess you have it enabled. You can ignore the warning.

@yv5 said in Has anyone found solution for ExpressVPN?: I have followed it ...think 10-15 time with no luck Sorry for my late reply, the OVH DC (French) fire, caused a lot of work for me, but I see @Gertjan helped

@viragomann You are a life saver! I had a floating rule for 1194 which I didn't remember creating. Thank you so much!

@sensewolf said in OpenVPN only for certain network?: @fearnight said in OpenVPN only for certain network?: Just wanted to chime in and say I finally got my setup working after finding this thread. All I had to do was uncheck "Don't pull routes" and it started working. I was having the same symptoms as @sensewolf before. Sorry, did you mean to say you checked the box "Don't pull routes" or did you actually uncheck it (which I would find even more counter intuitive than everything else that is happening on my pfSense in this context)? Right, I typed this wrong. Sorry. I went in and "checked" the box in the OpenVPN client config. It was unchecked by default.

@docop2 hum interesting.. it's the same if i plug to pf1 a win10pc and open a vpn client, as soon it start.. it only give me terminal, no more web browsing.

Somebody please?

@derelict said in Access site to site networks through remote access setup: @bambos Did you route the Remote Access tunnel network over the VPN on firewall B so traffic flows the other way? Do the firewall rules on both OpenVPN tabs on both firewalls pass the necessary traffic? @Derelict actually your first comment was right on point. I have set on firewall B, on site to site settings, in the field of remote networks, i have added the tunnel IP of road warrior VPN. Thank you very much for your help. I know you know, i just explain it here for future reference, maybe someone need it.

@alep11 Follow up sure would be nice.. I'm sure most people don't care but I spend hours and hours chasing answers only to find threads like this one where people never follow up on what they post. This is the first crap that google always pulls up. Old unanswered and unfollowed up on posts. Then when I ask the same question months later I get attitude thrown at me Like I didn't even bother to search the web or the forum for answers first. Thanks..

@antonio-briguglio said in Voip app connected via openvpn when you start phone call the audio is not heard: OK thanks Just yell if you need something

After a whole day i'm able to run stunnel with openvpn. From a fesh install of Pf. Vpn, nat,rule give the vpn working fine. i don't set any dns. Dns leak , as it seem not possible to set DOH or dot in pfsense with just : providerdns.com/dns-query. the how: make sure Vpn is set to tcp 1194 and work fine before. So install stunnel package / then put: client mode check / listen ip : 127.0.0.1 /listen port: 1194 redirect to ip : vpnprovider.com / redirect to port: 443 log: notice / timeout : 0 / custom option: it,s exactly as your provider conf file. if they write option = noSslv2 , you put it all. If not it will just not work. The box custom option could be rename to : extra setting to be more clear. This is the first guide on internet. Also, passing from a first ovpn inudp1194 do work fine, no forward port or anything else. A bit slow to get the page load directly, but all fine, dual vpn back to back.