<![CDATA[OpenVPN as a last resort]]>Hi,

I'm travelling abroad soon to the Middle East (Iran) and need to be able to connect back to my home network. My understanding is that they are extremely restrictive of Internet access and apparently at times block even SSL access. So even OpenVPN might not be guaranteed.

I'm guessing for sure they have blocked 1194 and other VPN types and respective ports. My best hope is to configure OpenVPN to run on an "unlikely to be blocked" port like 80, 8080, 25, etc.

So configuring OpenVPN on port other than default 1194 involves creating a new profile? So I can just copy past everything into the new profile but have under "listening port" port 80, 25, etc.?

Thanks.

]]>https://forum.netgate.com/topic/15567/openvpn-as-a-last-resortRSS for NodeSun, 11 Oct 2026 11:46:01 GMTWed, 27 May 2009 18:45:25 GMT60<![CDATA[Reply to OpenVPN as a last resort on Sat, 29 Aug 2009 09:13:44 GMT]]>Yes, you have to be able to connect to your server - if the network is blocking ports then you can't connect.

]]>https://forum.netgate.com/post/206470https://forum.netgate.com/post/206470Sat, 29 Aug 2009 09:13:44 GMT<![CDATA[Reply to OpenVPN as a last resort on Sat, 29 Aug 2009 07:14:44 GMT]]>@Cry:

I've run OpenVPN on 443/TCP and 53/UDP without problems, even from restrictive networks.

Ports have to be open?

]]>https://forum.netgate.com/post/206460https://forum.netgate.com/post/206460Sat, 29 Aug 2009 07:14:44 GMT<![CDATA[Reply to OpenVPN as a last resort on Thu, 30 Jul 2009 07:51:29 GMT]]>Im running 443/TCP as we speak. Just make sure you run the WebConfigurator on a different port!

]]>https://forum.netgate.com/post/204083https://forum.netgate.com/post/204083Thu, 30 Jul 2009 07:51:29 GMT<![CDATA[Reply to OpenVPN as a last resort on Wed, 27 May 2009 21:41:21 GMT]]>I've run OpenVPN on 443/TCP and 53/UDP without problems, even from restrictive networks.

]]>https://forum.netgate.com/post/198479https://forum.netgate.com/post/198479Wed, 27 May 2009 21:41:21 GMT<![CDATA[Reply to OpenVPN as a last resort on Wed, 27 May 2009 21:13:51 GMT]]>I used an OpenVPN setup in the past to get through very restrictive networks by running the server on TCP/443  (https).
Like this you can even get through most setups with a squid as filter.

]]>https://forum.netgate.com/post/198474https://forum.netgate.com/post/198474Wed, 27 May 2009 21:13:51 GMT<![CDATA[Reply to OpenVPN as a last resort on Wed, 27 May 2009 18:54:24 GMT]]>You can definitely change the port but remember that OpenVPN uses UDP by default, not TCP.

It'd probably be sensible to use a well-known UDP port such as 53 (DNS) or 123 (time) - make sure they're not in use on your WAN port and try it extensively before you go!

]]>https://forum.netgate.com/post/198464https://forum.netgate.com/post/198464Wed, 27 May 2009 18:54:24 GMT