Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issues with VPN disconnecting randomly. write UDPv4: Permission denied (fd=6,code=13)

    Scheduled Pinned Locked Moved
    OpenVPN
    2
    3
    537
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      unique_username
      last edited by

      Hay guys,
      Im running OpenVPN on my box and it has been great for a few months.
      But in the last week or two, it has been randomly disconnecting and not reconnecting till i go do it manually.
      I have set it to verbose 5 and have found the exact point it goes bad.
      I cant find anything online about: write UDPv4: Permission denied (fd=6,code=13)
      Any ideas what fd6, Code 13 mean?
      After about a min of permission deny's, it does a ping-reset.

      Logs:
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [77] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=76
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [52]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [77] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=76
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [52]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [77] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=76
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 READ [174] from [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=173
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN WRITE [149]
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [1400]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [1425] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=1424
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [682]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [707] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=706
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [68]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [93] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=92
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [68]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [93] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=92
      ..... these for 50ish lines^
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [68]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [93] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=92
      Dec 11 11:24:53 pfsense openvpn[95150]: write UDPv4: Permission denied (fd=6,code=13)
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [68]
      Dec 11 11:24:53 pfsense openvpn[95150]: UDPv4 WRITE [93] to [AF_INET]xx.xx.xx.xx:1197: P_DATA_V2 kid=1 DATA len=92
      Dec 11 11:24:53 pfsense openvpn[95150]: write UDPv4: Permission denied (fd=6,code=13)
      Dec 11 11:24:53 pfsense openvpn[95150]: TUN READ [68]

      1 Reply Last reply Reply Quote 0
      • S
        smirkis
        last edited by

        have you checked to see if the vpn server you have been using has maybe gone down? that happens sometimes

        1 Reply Last reply Reply Quote 0
        • U
          unique_username
          last edited by

          Been overseas for a few weeks sorry.
          So yeah, i have tried different servers, even TCP.
          But they all DC under load.

          What i have also now done, is setup a VPN gateway group, with two VPNs in it for failover.
          What i have been noticing is that sometimes when one fails, the other takes over in under 10ish secs, so all good. But sometimes when one goes, the other fails at the same time, so yeah ded.

          I have been in contact with PIA, my VPN supplier, and they are bloody useless. He started going on about how their VPN app running on the end clients is the best way as its the most configurable...
          I kind of gave up on PIA support after that haha.

          I have posted my config to one of my VPNs for anyone to have a look to see if they can see any glaring issues?
          BTW, when i took that, i had the custom options feild empty. I have now got:
          resolv-retry infinite
          persist-key
          persist-tun
          tls-client
          remote-cert-tls server
          compress
          reneg-sec 0
          In there and it seems to like those settings i think? (some might be redundant)

          I have it running on an old PC with dual NICs (and with AES-NI) And untill not all that long ago, it was fine.
          What im thinking now, is that i should buy one of those little gateway devices like the Protectli Vault FW4B or something as it might be a hardware error? Whats you peoples thoughts

          signal-2024-01-11-100631.jpeg

          1 Reply Last reply Reply Quote 0
          • U unique_username referenced this topic on
          • Z zeca referenced this topic on
          • First post
            Last post