Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Openvpn connecting but no traffic back.

    Scheduled Pinned Locked Moved OpenVPN
    5 Posts 2 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Sam 1
      last edited by

      I am running openvpn on my pfsense so I can use jellyfin away from home. It was working for months but now has stopped working. My phone is the only client it seems to connect quickly. When I take a packet capture at the firewall, I see a packet come from the phone, the server responds with a 302, the phone makes a new GET then the server sends a bunch of data and the phone resends the syn packet. Jellyfin works fine when I am on the network. I cannot think of any changes I made before it just stopped working. I setup dynamic dns but that was working for a few weeks before it stopped. Has anybody seen anything like this?

      My openvpn client is a different IP space from my LAN. I don't do any natting on the vpn. The firewall has routes for it. I can ping the phone from my jellyfin server so that works. I am at a loss. Any ideas?

      1 Reply Last reply Reply Quote 0
      • S
        Sam 1
        last edited by

        When I take a packet capture on my firewall, on the ovpn1 interface, I see the traffic going back down the tunnel. So that means the traffic is making it back to my client right?

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @Sam 1
          last edited by

          @sam-1

          No, the only way you can be sure of what's arriving at the client is to do packet captures on the client. In your example, is the client the endpoint? Or a router? Perhaps the packets make it as far as the other router, but no further.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          S 1 Reply Last reply Reply Quote 0
          • S
            Sam 1 @JKnott
            last edited by

            @jknott my android mobile is the client. I cannot find a way to do the packet capture as all the apps use a VPN to collect the packets. I changed my forwall rule and that broke it so I know it have the firewall rule right. I tried sending all traffic and I cannot get that to work. So I might have a routing issue internal on the firewall but then I would not see the traffic going back out ovpn interface.

            1 Reply Last reply Reply Quote 0
            • S
              Sam 1
              last edited by

              I change my openvpn firewall rule on the WAN interface destination to "WAN address" from "this firewall (self)" . It seems that the "this firewall (self}" does not update the state table correctly, that is why I can make small call and get my 302 but not send any real data. So use the "WAN address" for the destination for the openvpn rules.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.