Openvpn connecting but no traffic back.
-
I am running openvpn on my pfsense so I can use jellyfin away from home. It was working for months but now has stopped working. My phone is the only client it seems to connect quickly. When I take a packet capture at the firewall, I see a packet come from the phone, the server responds with a 302, the phone makes a new GET then the server sends a bunch of data and the phone resends the syn packet. Jellyfin works fine when I am on the network. I cannot think of any changes I made before it just stopped working. I setup dynamic dns but that was working for a few weeks before it stopped. Has anybody seen anything like this?
My openvpn client is a different IP space from my LAN. I don't do any natting on the vpn. The firewall has routes for it. I can ping the phone from my jellyfin server so that works. I am at a loss. Any ideas?
-
When I take a packet capture on my firewall, on the ovpn1 interface, I see the traffic going back down the tunnel. So that means the traffic is making it back to my client right?
-
No, the only way you can be sure of what's arriving at the client is to do packet captures on the client. In your example, is the client the endpoint? Or a router? Perhaps the packets make it as far as the other router, but no further.
-
@jknott my android mobile is the client. I cannot find a way to do the packet capture as all the apps use a VPN to collect the packets. I changed my forwall rule and that broke it so I know it have the firewall rule right. I tried sending all traffic and I cannot get that to work. So I might have a routing issue internal on the firewall but then I would not see the traffic going back out ovpn interface.
-
I change my openvpn firewall rule on the WAN interface destination to "WAN address" from "this firewall (self)" . It seems that the "this firewall (self}" does not update the state table correctly, that is why I can make small call and get my 302 but not send any real data. So use the "WAN address" for the destination for the openvpn rules.