Opening ports for bittorrent over a VPN (PIA)

[firemogle]

I have my VPN on pfsense working correctly, right now I only want one device to connect over VPN and it does so fine.  However I also want it to have access to bittorrent and I cannot for the life of me figure out how to get the ports open in this configuration, I've searched for hours for a howto but I have not been able to find one.

Is it possible to have only one device (or ports from one device) sent over the VPN network and the rest over WAN, and if so is there a guide on how to get this set up?

Thanks for any help!

[Pippin]

15 seconds :)
https://forum.pfsense.org/index.php?topic=106305.0

[firemogle]

I tried that guide and I went from one machine through the VPN and the rest WAN, to all but one through WAN and one with no connection.

I think I am good aside from getting the ports setup, but I have probably looked at 20-30 guides now and nothing is working.

This is on a 2 day old install and all I have done is get PIA connected and a firewall rule for getting one machine on the VPN.  Really, if I can get port 6881 and 6882 going from VPN to one IP I think I would be set.

Thanks again,

[Derelict]

@firemogle:

Really, if I can get port 6881 and 6882 going from VPN to one IP I think I would be set.

Thanks again,

Are you talking about connections outbound to destination ports 6881 and 6882 or connections from the internet to 6881 and 6882 being forwarded to your host?

The latter is trivial. Just make the destination ports on the rules that policy route to the VPN 6881 - 6882 instead of any. I don't know if you need TCP or UDP or both. TCP probably. But I don't think bittorrent works this way.

To get ports from the internet forwarded to your host, first PIA has to listen on those ports and know to forward the connections to you. You have to have an OpenVPN assigned interface and port forward those ports to your inside host. Then you have to be sure those ports are allowed into your firewall on OpenVPN assigned interface rules - normal auto-generated by the NAT rule are OK here. If you're talking about making something like the attached show Open, this is what you want.