Yeah new package available, 0.7_3 Now when you click you get the gui like you should.. Thanks jimp

ok thanks man, appreciate it.

You can check data usage per Firewall Rule. :-) -Rico

You should NOT give any IP Configuration to the assigned OpenVPN Inerface (check https://www.netgate.com/docs/pfsense/book/openvpn/assigning-openvpn-interfaces.html). Why don't you just hand out one separate pfSense local User for each of your real User? This will add more Security and you are able to give different access rights based on Firewall Rules. -Rico

Thanks for sharing gateway settings

I think I found a solution. From https://www.reddit.com/r/PFSENSE/comments/7or0bt/pia_vpn_leaking_ipv6/ System -> General Setup -> DNS Server Override (unchecked) System -> General Setup -> Disable DNS Forwarder (checked) Services -> DNS Resolver -> DNS Query Forwarding (checked) Reboot I am now posting on this forum while using my pfSense router and all seems good

Yeah, you need an additional phase 2 for the routing between the remote network and the OpenVPN tunnel subnet. So the phase 2 has to be added on both site of the IPSec tunnel, of course. In the OpenVPN server settings add the remote network 10.50.0.0/20 to the "IPv4 Local network/s".

Actually I don't have any problem with 6.7 (running Windows Server and Ubuntu Server VMs), seems also strange that problem is caused by vmware because it should affect also traffic from the Windows client that it's behind pfSense but runs VPN flawless without packet loss. I've followed all requirements and suggestions in order to virtualize pfSense on ESXi so everything it's already enabled (with VMXNET ethernet interfaces) and it's working fine since some years & upgrades (I think I've installed it when there was pfSense 2.1 and ESXi 5.5/6.0)

You have this firewall rule on your WAN interface : [image: 1537551394239-166422c1-9ef1-4195-b266-4e1289058c2f-image-resized.png] My 1194 is your 1200. Just for testing :if you make this firewall rule on WAN : [image: 1537551643036-1dde5799-c17c-4a72-a525-86796299fe66-image-resized.png] can you access the pfSense GUI from "Internet" ? Using https://myvpn.my-fqdn.tld or https://a.n.c.d ? If not : something is blocking between pfSense and the rest of Internet.

Ended up finding that Client Override needed to be enabled on the Server Side PFsense. Once we enabled this, everything started working.

@thenarc Thanks for trying anyway. Yeah, watching the CPU usage was one of the first things I tried and it definitely isn't a problem as far as I can see, not even close. I'll keep trying different configurations, but if you or anyone else thinks of something then do let me know and I'll owe you a beer :-)

Sorry, it was an idiotic error on my part. I was using the wrong .ovpn file. Problem solved!

No, iroutes are not needed in that mode.

@bcruze said in Connecting to AirVPN with OpenVPN and Gateway issue: https://airvpn.org/topic/17444-how-to-set-up-pfsense-23-for-airvpn/ i learned ALOT by reading and following this guide. there are still things to uncheck but you have to read the entire thread. my connection has been 100% stable if i just stop tinkering. good luck Airvpn is a great provider (tunnel settings uncheck BOTH that you have checked) you can also type IFCONFIG at the diag > command prompt and your tunnel interface gateway will be listed towards the bottom.. Alright, ill check this out thanks. @rico said in Connecting to AirVPN with OpenVPN and Gateway issue: With 0.1ms RTT I don't think you are Monitoring the other Tunnel Side (VPN Provider). -Rico I thought this was strange also, considering my local ISP gateway was 8.9ms and 2.2ms

Firewall rules - lan- add each of your devices (assign a static up to then from dhcp lease page). Anyways add them again to the above then change the gateway to your vpn gateway If you don’t have another gateway your vpn isn’t setup properly... my setup like this has been working for years! Pfsense is an amazing firewall