Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Shrew windows tunnel works, linux tunnel fails

    Scheduled Pinned Locked Moved IPsec
    13 Posts 3 Posters 4.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Metu69salemi
      last edited by

      and what rules you have in vpn tunnel itself?

      1 Reply Last reply Reply Quote 0
      • E
        El Snorro
        last edited by

        @Metu69salemi:

        and what rules you have in vpn tunnel itself?

        On my pfsense box you mean?

        1 Reply Last reply Reply Quote 0
        • P
          podilarius
          last edited by

          Yes, you must have firewall rules in the VPN (racoon or openVPN) before it allows traffic to pass over the VPN.

          1 Reply Last reply Reply Quote 0
          • E
            El Snorro
            last edited by

            @podilarius:

            Yes, you must have firewall rules in the VPN (racoon or openVPN) before it allows traffic to pass over the VPN.

            I have configured my firewall rules correctly, since traffic can go trough the tunnel on a windows client.

            1 Reply Last reply Reply Quote 0
            • P
              podilarius
              last edited by

              Do you have iptables enabled on the linux system?

              1 Reply Last reply Reply Quote 0
              • E
                El Snorro
                last edited by

                No

                1 Reply Last reply Reply Quote 0
                • M
                  Metu69salemi
                  last edited by

                  Then i don't know, sorry

                  1 Reply Last reply Reply Quote 0
                  • P
                    podilarius
                    last edited by

                    If you traceroute from the linux system to something behind the remote firewall, where does it hang in the path?

                    1 Reply Last reply Reply Quote 0
                    • E
                      El Snorro
                      last edited by

                      Enabled tunnel, gave command route and traceroute… (this is from a different location)

                      thijs@ltthijslinux ~ $ route
                      Kernel IP routing table
                      Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
                      172.28.201.0    *               255.255.255.0   U     1      0        0 eth0
                      192.168.78.0    *               255.255.255.0   U     0      0        0 tap0
                      192.168.0.0     192.168.78.1    255.255.254.0   UG    0      0        0 tap0
                      link-local      *               255.255.0.0     U     1000   0        0 eth0
                      default         172.28.201.254  0.0.0.0         UG    0      0        0 eth0
                      thijs@ltthijslinux ~ $ traceroute 192.168.0.1
                      traceroute to 192.168.0.1 (192.168.0.1), 30 hops max, 60 byte packets
                       1  * * *
                       2  * * *
                       3  * * *
                       4  * * *
                       5  * * *
                      
                      1 Reply Last reply Reply Quote 0
                      • P
                        podilarius
                        last edited by

                        Not sure … I tested my Shew in Linux and it worked. Though mine it not using a tunnel interface. I have use existing adapter and I have a policy of the remote network.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.