Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Connect to OpenVPN Access Server?

    Scheduled Pinned Locked Moved OpenVPN
    46 Posts 5 Posters 17.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      damir
      last edited by

      Also, i am like 99% sure Netflix is showing US stuff

      If i go to : http://api-global.netflix.com/apps/applefuji/config

      And look for <geolocation></geolocation>it shows US for me;

      <geolocation>US</geolocation>

      There is still that 1%, but, not sure if there is any other way to check :)

      1 Reply Last reply Reply Quote 0
      • D
        damir
        last edited by

        I just checked logs in pfSense for OpenVPN, and noticed this:

        Nov 10 12:21:51 openvpn[21245]: write UDPv4: No buffer space available (code=55)
        Nov 10 12:21:52 openvpn[21245]: write UDPv4: No buffer space available (code=55)
        Nov 10 12:21:52 openvpn[21245]: write UDPv4: No buffer space available (code=55)
        Nov 10 12:21:52 openvpn[21245]: write UDPv4: No buffer space available (code=55)
        Nov 10 12:21:52 openvpn[21245]: write UDPv4: No buffer space available (code=55)
        Nov 10 12:21:52 openvpn[21245]: write UDPv4: No buffer space available (code=55)
        Nov 10 12:21:52 openvpn[21245]: write UDPv4: No buffer space available (code=55)

        Also, when i SSH to VPS, it doesn't show my WAN IP any more, but, Local IP from OpenVPN;

        root    pts/0    172.27.232.2    12:24    0.00s  0.00s  0.00s w

        When i do tracert to IP of VPS, it outputs like this:

        1    <1 ms    <1 ms    <1 ms  pfSense.home.network [192.168.1.1]
          2    26 ms    25 ms    25 ms  168.** (Full IP of VPS)

        Also, i am unable to connect to TeamSpeak 3 server hosted on the same VPS.

        This is done from my PC, and for this PC there are no rules (firewall) in pfSense.

        Googling my IP shows my WAN (ISP's) IP.

        Probably i messed up something else?:)

        Thanks

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          your buffers error prob could be a routing issue.. See this pfsense forum

          https://forum.pfsense.org/index.php?topic=40405.msg208614#msg208614

          https://airvpn.org/topic/11486-error-in-openvpn-logs-on-pfsense/

          If you want me to help you really need to show the FULL logs, not just the piece that you think matters..  There is most likely something else in the log that will point to why the error happens.. Like for example with your compression setting in the previous posting..

          If your pulling the routes from the vpn client connection its going to cause problems if it hands pfsense a default route down the tunnel, etc..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • D
            damir
            last edited by

            sorry  :'(

            i just cleared logs of opevpn, and reboot-ed pfSense

            current logs show this:

            at this time, still (for about 10 minutes now, there are no buffer errors logs)

            As soon as they show (if) i will post another log image (full logs this time  :) )

            anything that can be done to "fix" the routing issues, so, my VPS doesn't see this PC in "local" (if i saying this correctly), so, i can still use it as i used it for other services before connecting pfSense to OpenVPN-AS hosted on that VPS.

            Thanks

            1 Reply Last reply Reply Quote 0
            • D
              damir
              last edited by

              um, that "routing" thing is "fixed" i believe.

              what i did is setting public IP in Gateway for Monitoring, after i removed it, tracert to VPS is going normally, from my ISP to VPS, regular Path.

              When i SSH to VPS, it shows my ISP's (public IP)  :o

              anyway, good thing? lol

              There is also no more buffer errors under OpenVPN (System Logs).

              Will keep monitoring - and update the thread of something else comes up.

              also, i am able to connect to TS now :D

              Not sure if anything should be looked after from the log (image) i posted above this post, please advise.

              Big thanks

              1 Reply Last reply Reply Quote 0
              • D
                damir
                last edited by

                Definitely everything looks as it should (as i was expecting at least) (not 100% sure about my SysLogs for OpenVPN - but, probably somebody will let me know about this) :)

                SysLogs (OpenVPN) still looks almost the same as in previous posts.

                Most importantly no Buffer Errors  :)

                johnpoz - thank you very much for everything - and i apologize for bothering you so much.

                Learned a lot from you.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  What I am here for to help those that want to help yourself.. And you have been what would hope every user could be that comes here for questions, post info when asked.. Does some playing on their own - not just randomly pushing shit that has nothing to do with the problem at hand.

                  Hope you got everything working like you want..

                  To get rid of that mitm error about not checking the server, put this in advanced section of the client config
                  ns-cert-type server

                  That should clear that error up.  Those option errors are given because your blocking routes from the server..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • D
                    damir
                    last edited by

                    Understood :) Big thanks!

                    I will add this now to advanced section and reboot.

                    1 Reply Last reply Reply Quote 0
                    • D
                      damir
                      last edited by

                      After adding that to advanced, reboot, SysLog (OpenVPN) looks like this:

                      Still no Buffer errors, get around 130-200mbit over OpenVPN-AS, i am happy :)

                      Big thanks!

                      1 Reply Last reply Reply Quote 0
                      • D
                        damir
                        last edited by

                        I just noticed 2 new lines in SysLog (OpenVPN)

                        Nov 11 21:26:33 openvpn[22448]: Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #1131750 ] – see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
                        Nov 11 22:15:56 openvpn[22448]: Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #85096 ] – see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

                        above these 2 lines, everything is still the same as in the image above this post.

                        Anything i should worry about?

                        Thanks

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.