Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need help opening a port for incomming utorrent traffic through Openvpn

    Scheduled Pinned Locked Moved NAT
    9 Posts 5 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      khyr0n
      last edited by

      Hi everyone

      I'm running pFsense 2.2
      For the past month i've been setting up OpenVPN on my pfsense box. I've managed to route all outgoing traffic through the VPN (hope nothing is leaking)
      The problem comes when I try to forward my utorrent port (or any other port) through the Openvpn tunnel…

      Downloading in utorrent works perfectly, but uploading gets almost no clients and the red exclamation mark Indicated that I ain't connectable... Port check also reveals that my port is not open...
      I've intentionnaly disabled uPnP in pfsense.

      My configuration is loosely based on many tutorials I've found but none really gets me the port NATed out...

      Attached are my configs.

      Help would be appreciated!

      Thanks.

      portforward.jpg
      FW_LAN_Rules.jpg
      FW_OPT1_Rules.jpg
      NATOUT.jpg
      dash.jpg
      portforward.jpg_thumb
      FW_LAN_Rules.jpg_thumb
      FW_OPT1_Rules.jpg_thumb
      NATOUT.jpg_thumb
      dash.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        Will your VPN provider forward a port to you?  If they're assigning you an RFC1918 private address and won't port forward to you there's nothing you can do.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by

          You can get a VPS, install a desktop there, run your download programs etc there accessing it via remote desktop/teamviewer or whatever and then just upload the files via SFTP or whatever to your current location.

          1 Reply Last reply Reply Quote 0
          • K
            khyr0n
            last edited by

            @Derelict:

            Will your VPN provider forward a port to you?  If they're assigning you an RFC1918 private address and won't port forward to you there's nothing you can do.

            Well that's a pretty basic question that I didn't even think of… Is it something complicated to do on their end?

            And how do I determine if a port is forwarded to me? Support is really scarse over there...

            Thank you.

            1 Reply Last reply Reply Quote 0
            • K
              khyr0n
              last edited by

              @kejianshi:

              You can get a VPS, install a desktop there, run your download programs etc there accessing it via remote desktop/teamviewer or whatever and then just upload the files via SFTP or whatever to your current location.

              Hmm my provider used to provide a remote PC but not anymore…

              The funny thing is before I thought of putting Openvpn tunnel on my pfsense box I used the Bitvise SSH to run my Openvpn tunnel and everything was running fine... So they must assign me a port...

              Or am I mistaken?

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                No idea what that is or how it was set up.

                I see you have a gateway of 10.x.x.x on your OpenVPN client interface.  You can put all the port forwards on your VPN interface you want.  Nobody will be able to get to them.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • G
                  gderf
                  last edited by

                  I believe you are over-thinking this.

                  What you are probably not understanding is that the far end of your VPN connection is where the IP address is that is accepting connections from other torrent clients. Furthermore, you say downloading works perfectly, but it wouldn't run at anything resembling good speed if you weren't also uploading - to other torrent clients.

                  Also, the icon that shows you are "not connectable" is meaningless when running a torrent client over a VPN or proxy. You are in fact connectable, but on the IP address at the far end of your VPN.

                  So, don't bother trying to open a port for incoming bittorrent - there is nothing to open on your end.

                  Not having a huge number of clients that you are uploading to isn't unusual, so don't worry about it.

                  1 Reply Last reply Reply Quote 0
                  • T
                    thermo
                    last edited by

                    Some vpn providers, e.g.. Strongvpn, do forward all the incoming connections to your client interface, most providers don't though. Check if that is the case first. Then port forwarding will work.
                    Renting a vps and setting up a basic linux installation and torrent software is probably the way to go though and can even work out cheaper than a vpn-only service but is a little more work to set up.

                    1 Reply Last reply Reply Quote 0
                    • K
                      khyr0n
                      last edited by

                      Thanks for all your replies, I finally bought from another VPN provider and so far it's working pretty well.

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.