[SOLVED] Port forward
-
so i should change my dhcp to 172.18.14.0/24 ? and i have nooo idea what is 10.0.0.1
-
it shows me that 10.0.0.1 is the Gateway ….
How to disable the security check?
-
What do you have in front of pfsense? something is 10.0.0.1 – that is NOT a routable public address is a nat to rfc1918 from a public address.
I would change your local network, pfsense address and yes dhcp to be a different network other than common 192.168.1.0/24 -- I could change mine - but you most likely will run into this problem with other users, or other locations you come from.
If you check this, I should be able to get into your openvpn config and fix up some stuff. about dns, etc. And look at your wan IP and see if your behind nat, etc.
-
done!
and i don't have anything in front of pfsense.. :-\
-
Ok I got in.. But I found your running proxy!! Well explains my issue with being able to query dns once handed to me, but not able to access any sites..
I will have to look deeper.. But why do you need that proxy running? And why do you have specific routes to your dns that are .1?
Yeah your ISP is clearly natting your connection, etc. But since I can hit you on 1194, it must be a 1:1 nat – they allow traffic into you. Can you change your network - so I can point to your proxy. I am also on 192.168.1.0/24 and quite likely your friend in china could be on that very common network as well.
-
ok, i try to find find where should i modified.
And i activated the proxy for chasing but normally it's not working very well for me :P -
Can we turn it off - then I should be able to use internet through your connection
if your friend is not on 192.168.1.0 or 192.168.2. which you used for your tunnel network you should be fine. Other than fact I don't believe china will allow outbound connection on udp 1194 which is the default openvpn port..
-
i had to get it back to factory reset :-\ bat the good this is that it's brand new :)
i disabled the enforcement check but i have to setup the vpn 5 min -
Not for changing an IP you wouldn't All you needed to do was change the lan IP to new network.
-
what should i put in " Tunnel Network: " ? 192.168.1.0 ?
-
No that is a COMMON network.. something NOT common.. I use 10.0.8.0/24 for one of mine, and 10.0.200.0/24 for the other one.. I run openvpn both on tcp 443, and udp 1194
Pick something out of the rfc1918 space that you feel is not common! but using the first networks in the space is very common. Every soho router I have seen defaults to 192.168.0.0/24 or 192.168.1.0/24 etc.. ;) Not good networks to use if you might have other users connecting to you via vpn.
Then the next few are used because it makes sense.. So I have 3 segments on my network lan, wlan and dmz - I use 192.168.1.0/24 192.168.2.0/24 and 192.168.3.0/24
So if you want to make sure your not going to step on such a setup on the remote side.. You would want to use something odd ball like the 172.18.14.0/24 network I just pulled out of thin air ;)
Which I am off next week, might be about time I changed my address space around to be outside norm when helping people like you.
-
i sent you the ZIP file to your mail, i changed all my passwords i hope it's good now :D
-
Yup rocking internet through your connection.. As you can see when connected I show your IP, 5.x.x.x and when not connected I show my normal IP.
your not handing out dns.. So unless they can pull dns from their local connection still you could have issues, and they won't be able to resolve anything on your eve.local as you had it before.
Hand out your pfsense lan IP if your using dns forwarder. Also Just becuase you use some random high port does not mean china would not block that. Most companies block uncommon ports outbound.
For example in a network, you might only be able to to http and https outbound. Or you might even have to use a proxy. Which is nice that openvpn can bounce off a proxy, etc. But some random 30K port is unlikely to be allowed outbound from china?? But hey you can try.
But as you can see your currently routing outbound to the internet through your vpn connection. Now if any local resources you would like me to verify – just send me details.
-
when i exporting the user can i use " Host Name Resolution : DynDNS " ? because i have dynamic ip
-
Yeah that should work..
Just send your friend the installer package because they unlikely to have openvpn installed.
If you want you can send to me with your hostname config zip and I can test that for you.
Have Fun!!!
If does not work with your high udp port, try tcp 443 or 80.. If that does not work then have to work out what can get through the china firewall - happy to help if you run into more questions.
-
Thanks! i sent to you the mail to test the connection with dyndns. ;D
Thanks for helping me out!
-
That is not working? I resolve the address just fine.. I can PM you the IP it resolve too. But timing out connecting
