OpenVPN not working after restart …

Bredys

I tried download and apply last snapshot before i start writing this post…
And dont help me... :D

sh_man

Not being a developer I probably can't help much more.

Have a look at this thread which will help you track down whether it is the same problem I had

http://forum.pfsense.org/index.php/topic,4020.0.html

Bredys

Ech.. i hope that some developer fix this soon :(

sullrich

This has been fixed. Upgrade to a recent snapshot.

Bredys

Sorry but not help to me…

I tried last snapshot and I still must update any rule after pfsense restart... before that, openvpn dont work :(

sullrich

What rule are you speaking of?

Bredys

OpenVPN traffic is blocked after restart… I must open ANY wan or lan rule, click save and then apply for unblocking openvpn.

sh_man

Exactly which version and build of pfSense are you running?

Bredys

PC Version
1.0.1-SNAPSHOT-03-15-2007
built on Mon Mar 19 13:32:03 EDT 2007

sh_man

If you run pfctl -sr | grep tun from SSH before you save/apply the rule I presume you do NOT get two lines like this:-

pass out quick on tunx all keep state label "let out anything from firewall host itself openvpn"
pass in quick on tunx all keep state label "let out anything from firewall host itself openvpn"

where tunx is the OpenVPN tunnel (if you only have one it will be tun0)

and after save/apply rule you DO get two lines like that.

Bredys

As you say… (write) ...
after restart there is no rule to pass traffic on tun interface...

When i change rule and click apply ...

pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

sullrich

Try letting the system boot. And then from a shell run:

/etc/rc.filter_configure_sync

Does this solve the issue?

Bredys

Yes, it solve my problem after reboot…

pfctl -sr | grep tun

/etc/rc.filter_configure_sync

pfctl -sr | grep tun

pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

sullrich

Try this from a shell:

fetch -o /etc/inc/openvpn.inc http://www.pfsense.com/~sullrich/openvpn.inc.txt

Reboot and see if they come up correctly now.

Thanks!

Bredys

Oh yes, this help to solve my problem!

;D

Now i can connect to my pfsense box after restart via openvpn without any problems!

sullrich

Great! I'll commit now.

Bredys

And thank you and sh_man very much for your help and time…