Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN not working after restart …

    OpenVPN
    3
    20
    8.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      Bredys
      last edited by

      Greetings,

      i have problem with openvpn.
      After PFsense restart - openvpn stop working (routing traffic).
      Connection from OpenVPN client is ok, but i cannot reach any destination behind PFSense.
      When i change something in any rule and click apply, then after filter reloading openvpn start working…

      Im using last snapshot...

      Thanks for any help.

      1 Reply Last reply Reply Quote 0
      • S
        sh_man
        last edited by

        I have this problem as well with slow machines running off the cd/floppy disk. It could be a timing problem or to do with a fix that was put in  recently to stop the OpenVPN port (1194) from being hijacked by another process.

        Basically the two rules to allow traffic in and out of the TUNx interface are not written. When you change a filter rule and apply (you do not actually have to change anything, just save!) the rules get written.

        Either way I agree it is a pain but at least you know how to get traffic moving!

        1 Reply Last reply Reply Quote 0
        • S
          sh_man
          last edited by

          Hmm - should have checked BEFORE posting :D. I have just downloaded the livecd snapshot and tried it and had no problems.

          Which snapshot are you running? Scott put in a fix yesterday that solved some problems with TUNx interface being blocked - which is what is causing your problem.

          Check that the snapshot you are using is after 1.0.1-SNAPSHOT-03-08-2007 built on Thu Mar 15 11:35:13 EDT 2007 - check the file creation date on the snapshot if you are not sure.

          1 Reply Last reply Reply Quote 0
          • B
            Bredys
            last edited by

            I tried download and apply last snapshot before i start writing this post…
            And dont help me... :D

            1 Reply Last reply Reply Quote 0
            • S
              sh_man
              last edited by

              Not being a developer I probably can't help much more.

              Have a look at this thread which will help you track down whether it is the same problem I had

              http://forum.pfsense.org/index.php/topic,4020.0.html

              1 Reply Last reply Reply Quote 0
              • B
                Bredys
                last edited by

                Ech.. i hope that some developer fix this soon :(

                1 Reply Last reply Reply Quote 0
                • S
                  sullrich
                  last edited by

                  This has been fixed.  Upgrade to a recent snapshot.

                  1 Reply Last reply Reply Quote 0
                  • B
                    Bredys
                    last edited by

                    Sorry but not help to me…

                    I tried last snapshot and I still must update any rule after pfsense restart... before that, openvpn dont work :(

                    1 Reply Last reply Reply Quote 0
                    • S
                      sullrich
                      last edited by

                      What rule are you speaking of?

                      1 Reply Last reply Reply Quote 0
                      • B
                        Bredys
                        last edited by

                        OpenVPN traffic is blocked after restart… I must open ANY wan or lan rule, click save and then apply for unblocking openvpn.

                        1 Reply Last reply Reply Quote 0
                        • S
                          sh_man
                          last edited by

                          Exactly which version and build of pfSense are you running?

                          1 Reply Last reply Reply Quote 0
                          • B
                            Bredys
                            last edited by

                            PC Version
                            1.0.1-SNAPSHOT-03-15-2007
                            built on Mon Mar 19 13:32:03 EDT 2007

                            1 Reply Last reply Reply Quote 0
                            • S
                              sh_man
                              last edited by

                              If you run pfctl -sr | grep tun from SSH before you save/apply the rule I presume you do NOT get two lines like this:-

                              pass out quick on tunx all keep state label "let out anything from firewall host itself openvpn"
                              pass in quick on tunx all keep state label "let out anything from firewall host itself openvpn"

                              where tunx is the OpenVPN tunnel (if you only have one it will be tun0)

                              and after save/apply rule you DO get two lines like that.

                              1 Reply Last reply Reply Quote 0
                              • B
                                Bredys
                                last edited by

                                As you say… (write) ...
                                after restart there is no rule to pass traffic on tun interface...

                                When i change rule and click apply ...

                                pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
                                pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

                                1 Reply Last reply Reply Quote 0
                                • S
                                  sullrich
                                  last edited by

                                  Try letting the system boot.  And then from a shell run:

                                  /etc/rc.filter_configure_sync

                                  Does this solve the issue?

                                  1 Reply Last reply Reply Quote 0
                                  • B
                                    Bredys
                                    last edited by

                                    Yes, it solve my problem after reboot…

                                    pfctl -sr | grep tun

                                    /etc/rc.filter_configure_sync

                                    pfctl -sr | grep tun

                                    pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
                                    pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      sullrich
                                      last edited by

                                      Try this from a shell:

                                      fetch -o /etc/inc/openvpn.inc http://www.pfsense.com/~sullrich/openvpn.inc.txt

                                      Reboot and see if they come up correctly now.

                                      Thanks!

                                      1 Reply Last reply Reply Quote 0
                                      • B
                                        Bredys
                                        last edited by

                                        Oh yes, this help to solve my problem!

                                        ;D

                                        Now i can connect to my pfsense box after restart via openvpn without any problems!

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          sullrich
                                          last edited by

                                          Great!  I'll commit now.

                                          1 Reply Last reply Reply Quote 0
                                          • B
                                            Bredys
                                            last edited by

                                            And thank you and sh_man very much for your help and time…

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.