Solved TCP/UDP: Incoming packet rejected from [AF_INET]

doguibnu · May 31, 2018, 2:16 PM

hello!

After create a vpn we receive this error:

TCP/UDP: Incoming packet rejected from [AF_INETexpected peer address: [AF_INET]public-IP(200....):1194 (allow this incoming source address/port by removing --remote or adding --float)

Someone know how to fix this?
What is wrong config?

Thanks for attention and help

Douglas

Pippin · May 30, 2018, 5:49 PM

Add the directive
float
to server and client(s) config.
Possibly there`s a check box available in the server and/or client export package.

doguibnu · May 31, 2018, 2:23 PM

Hello All
The error was on Firewall-Wan-Rule Protocol for openvpn. The wizard selected the "any" protocol. So, change to "UDP"
Now works fine

Thanks attention and help

Douglas

Pippin · May 31, 2018, 2:30 PM

That`s odd .....

johnpoz · May 31, 2018, 2:58 PM

what version of pfsense are you running - I thought there was a bug report about firewall rules created for openvpn being incorrect.. But that was corrected..

https://redmine.pfsense.org/issues/8391

But it was using tcp4 vs tcp.. I just ran through the wizard and created a new udp server and it did not create any rule.. It created correct UDP with port and ipv4

Running 2.4.3p1