Openvpn firewall rule

gullio

hi, i have trying to setup firewall rule for my openvpn users, i have configured the opt interface for openvpn(tun0), i have enable it and set none on ip address.

after that i have go to rules select new interface called openvpn and i have created a new rule, but when i issue the apply button the gui return me with an error related to syntax.

to clarify:

php: : There were error(s) loading the rules: /tmp/rules.debug:206: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [206]: pass in quick on $openvpn inet proto icmp from /32 to any icmp-type echorep keep state label "USER_RULE"

this happen when add a rule to the openvpn interface

block
from: openvpn subnet
to: any
protocol: icmp
type: any

if i change openvpn subnet to any( as source) no error is displayed, but the rule not work.

i use pfsense ver 1.2.3

how can i enable traffic filter on openvpn without encountering errors?

Thanks
Giulio

jimp

http://doc.pfsense.org/index.php/OpenVPN_Traffic_Filtering_on_1.2.3

gullio

hi jimp thanks for reply, i have followed this guide but i can't figure out what is wrong.

i have checked the interface and it is tun0 on server and on client, but any rule configured on interface tun0 won't apply.

pls advice

jimp

If you follow the instructions there exactly, it works. I've done this dozens of times.

gullio

i have follow the instruction on the link you have advice, i have changed on custom configuration adding dev tun9(for example) also configured the optx interface with tun9 then i disable/enable the openvpn server and i still go anywhere on my network else if i have permitted only icmp protocol.

perhaps i missed something… i don't know but pls someone can explain me step by step.

thanks

gullio

hi, i have read the guide in the book you have wrote "pfsense the definitive guide" and i have solved my issue because the process is explained very well.

Thanks for all advice.