Thanks for you time,i don't need a VPN when i am at home,but i don't know how to bypass vpn just when i am at home.If my vpn is active when i am connected to my home wifi it will lose connection and he try to connect to my wan.My wish is too be always on vpn because with my work i go in many places. I will try your idea with dns override,sems more clean,right now i have on my client config my wan and my lan ip,so he will try next if one will fail. I might create 2 vpn servers one on wan and one on wifi interface.

Multi-WAN Tactics with OpenVPN are covered here: https://www.netgate.com/resources/videos/advanced-openvpn-concepts-on-pfsense.html (22:50 min). -Rico

@rsaanon Did you get it to work?

@ffarkas said in OpenVPN only recognizes the first of two DNS servers: Windows clients would automatically search on the other DNS server when a name cannot be resolved One of the most common misconceptions to how dns works at a basic level. As stated by Derelict all NS pointed to by a client need to be able to resolve the the same stuff the same way or your going to have a bad day. If a NS returns NX for something that is asked for - then the client stops asking.. Because it was told that doesn't exist, so why should it go ask anything else for something that doesn't exist. The only time a client will go ask the other NS is if there is a time out.. And you can never be sure which NS a client will be asking out of the NS listed..

Thanks for the reply but was going nuts had to check Disable hardware checksum offload and solved it

Looks like the 'up' statement is already being used by one of pfSense's internal scripts. So I'm gonna have to use the 'route-up' statement to execute my command. Also, 'script-security' has already been set to 3, so setting it again would be redundant.

Glad you have everything up and running again. -Rico

@Konstanti Thx for the help. Indeed outbound NAT was enabled. After changing that everything works as exspected.

It's now resolved. It was none of the above. Changing tunnel network to be /30 resolved it. I tested it afterwards: switching to /24 works in one direction switching to /30 full routing in both directions It shouldn't happen. I did try on a fresh installs of pfsense. Piotr

@konstanti I get 3 simultaneous connections; One connection is dedicated to the pfSense box. The other two are used on family laptops when travelling.

@viragomann Thanks very much, that works perfectly :)

Thanks, all solutions works good for me.

Did you do the OpenVPN routes correctly this time? You should never set any static routes for OpenVPN. Set local and remote networks in the server and client configs and let OpenVPN do it. Else we're going to need screen shots of the configurations. Not a summary of what you think you did. OpenVPN server and client and Diagnostics > Routes probably a good place to start. Plus the specific IP address pairs and how you're testing.

i added to Concurrent connections number 5 but still not working . i want to mention that the openvpn working fine but from only single internet source if the client change the internet source or just ip changed cannot reconnect again

Managed to find the issue. Didn't open the advanced box and in there was an option to select gateway. After that and a reboot all appears fine

pfSense is not a mail server! @jpscirocco said in Sitetosite routing problems: but it is maybe possible that just 1 client from network a uses the internet from network b ? If your router at site A is capable of doing this, it would work. Since it is not pfSense, this is the wrong place to ask that.

ok ! i'm going to do this

Suppose this was the wrong forum to ask in.