Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    OpenVPN, Viscosity & pfSense 2.4.5

    OpenVPN
    3
    7
    125
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      newUser2pfSense last edited by newUser2pfSense

      I installed a new version of pfSense a while back and I'm now configuring my OpenVPN setup, not unlike I did before my new installation of pfSense. I'm currently running pfSense 2.4.5-RELEASE-p1 (amd64) and Viscosity 1.8.6 (1546) on a MacBook Pro. Connecting to my pfSense OpenVPN installation with Viscosity has no issues, however, I'm noticing at around 6 minutes of viewing web pages, it appears that all network traffic stops. I can't get to any web pages, however, Viscosity still shows that I'm connected and pfSense still shows I'm connected. I've tested this several times now and the 6 minute time frame seems to hold. The only way I have been able to test the connections is by using my iPhone tethered to my MacBook Pro and using the Personal Hotspot.

      I know there are a lot of settings to consider when configuring pfSense for OpenVPN use but has anyone ever seen data stop flowing at a certain time interval when using pfSense with OpenVPN and Viscosity? Any suggestions would be most helpful. Thank you.

      Gertjan 1 Reply Last reply Reply Quote 0
      • N
        newUser2pfSense last edited by newUser2pfSense

        Interestingly, I deleted all of my settings and reconfigured OpenVPN on pfSense. I did an extended DNS leak test from [https://www.dnsleaktest.com/] and found the following:

        Query round Progress... Servers found
        1 ...... 5
        2 ...... 4
        3 ...... 4
        4 ...... 5
        5 ...... 4
        6 ...... 4

        The Query round is lines 1 thru 6.
        The Progress is ........
        Servers found is 5,4,4,5,4,4

        Shouldn't the Servers found be 1?

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          @newUser2pfSense said in OpenVPN, Viscosity & pfSense 2.4.5:

          Shouldn't the Servers found be 1?

          How should we know, you have zero mention of how you have dns setup on anything..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 23.05 | Lab VMs CE 2.6, 2.7

          1 Reply Last reply Reply Quote 0
          • N
            newUser2pfSense last edited by

            I'm only using Quad9's DNS servers in pfSense:
            9.9.9.9
            149.112.112.112

            1 Reply Last reply Reply Quote 0
            • johnpoz
              johnpoz LAYER 8 Global Moderator last edited by johnpoz

              Both of which are anycast IPs..

              So yeah... Your going to see lots of IPs

              woodynet.png

              If you’re wondering why you’re seeing WoodyNet, it’s because Quad9 is what’s called an anycast DNS, which automatically routes queries to the nearest server. While Quad9 has servers at more than 100 locations around the globe, it doesn’t own its own servers. Instead, Quad9 relies on Packet Clearing House (which is present at 160+ internet exchange points) to host DNS servers for it. PCH’s Executive Director is Bill Woodcock a/k/a Woody. Hence, WoodyNet.

              Love when users so worried about leaking dns, yet don't understand how any of it works at all in the first place.

              Do you really think that everyone on the planet actually just talks to single IP 9.9.9.9? from all over the globe?

              And clearly they are trust worthy, they don't even "own" servers providing dns - wonder what the "owners' of said servers or networks might be doing with all that dns info ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 23.05 | Lab VMs CE 2.6, 2.7

              1 Reply Last reply Reply Quote 0
              • Gertjan
                Gertjan @newUser2pfSense last edited by

                @newUser2pfSense said in OpenVPN, Viscosity & pfSense 2.4.5:

                the 6 minute time frame seems to hold

                Check the VPN logs :
                From the server.
                From the client.

                No "help me" PM's please. Use the forum.

                1 Reply Last reply Reply Quote 0
                • N
                  newUser2pfSense last edited by

                  johnpoz...thank you for your replies. Very helpful.

                  Gertjan...it seems after I configured OpenVPN for the second time on pfSense, the 6 minute time is no longer an issue, at least at the time of this post. If anything changes, I'll repost.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post