• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

OpenVPN not working after restart …

Scheduled Pinned Locked Moved OpenVPN
20 Posts 3 Posters 9.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    Bredys
    last edited by Mar 16, 2007, 10:32 AM

    I tried download and apply last snapshot before i start writing this post…
    And dont help me... :D

    1 Reply Last reply Reply Quote 0
    • S
      sh_man
      last edited by Mar 16, 2007, 10:42 AM

      Not being a developer I probably can't help much more.

      Have a look at this thread which will help you track down whether it is the same problem I had

      http://forum.pfsense.org/index.php/topic,4020.0.html

      1 Reply Last reply Reply Quote 0
      • B
        Bredys
        last edited by Mar 19, 2007, 4:03 PM

        Ech.. i hope that some developer fix this soon :(

        1 Reply Last reply Reply Quote 0
        • S
          sullrich
          last edited by Mar 19, 2007, 4:09 PM

          This has been fixed.  Upgrade to a recent snapshot.

          1 Reply Last reply Reply Quote 0
          • B
            Bredys
            last edited by Mar 19, 2007, 8:00 PM

            Sorry but not help to me…

            I tried last snapshot and I still must update any rule after pfsense restart... before that, openvpn dont work :(

            1 Reply Last reply Reply Quote 0
            • S
              sullrich
              last edited by Mar 19, 2007, 8:25 PM

              What rule are you speaking of?

              1 Reply Last reply Reply Quote 0
              • B
                Bredys
                last edited by Mar 20, 2007, 6:05 AM

                OpenVPN traffic is blocked after restart… I must open ANY wan or lan rule, click save and then apply for unblocking openvpn.

                1 Reply Last reply Reply Quote 0
                • S
                  sh_man
                  last edited by Mar 20, 2007, 9:02 AM

                  Exactly which version and build of pfSense are you running?

                  1 Reply Last reply Reply Quote 0
                  • B
                    Bredys
                    last edited by Mar 20, 2007, 10:45 AM

                    PC Version
                    1.0.1-SNAPSHOT-03-15-2007
                    built on Mon Mar 19 13:32:03 EDT 2007

                    1 Reply Last reply Reply Quote 0
                    • S
                      sh_man
                      last edited by Mar 20, 2007, 11:01 AM

                      If you run pfctl -sr | grep tun from SSH before you save/apply the rule I presume you do NOT get two lines like this:-

                      pass out quick on tunx all keep state label "let out anything from firewall host itself openvpn"
                      pass in quick on tunx all keep state label "let out anything from firewall host itself openvpn"

                      where tunx is the OpenVPN tunnel (if you only have one it will be tun0)

                      and after save/apply rule you DO get two lines like that.

                      1 Reply Last reply Reply Quote 0
                      • B
                        Bredys
                        last edited by Mar 20, 2007, 12:49 PM

                        As you say… (write) ...
                        after restart there is no rule to pass traffic on tun interface...

                        When i change rule and click apply ...

                        pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
                        pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

                        1 Reply Last reply Reply Quote 0
                        • S
                          sullrich
                          last edited by Mar 20, 2007, 3:58 PM

                          Try letting the system boot.  And then from a shell run:

                          /etc/rc.filter_configure_sync

                          Does this solve the issue?

                          1 Reply Last reply Reply Quote 0
                          • B
                            Bredys
                            last edited by Mar 20, 2007, 4:17 PM

                            Yes, it solve my problem after reboot…

                            pfctl -sr | grep tun

                            /etc/rc.filter_configure_sync

                            pfctl -sr | grep tun

                            pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
                            pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

                            1 Reply Last reply Reply Quote 0
                            • S
                              sullrich
                              last edited by Mar 20, 2007, 4:23 PM

                              Try this from a shell:

                              fetch -o /etc/inc/openvpn.inc http://www.pfsense.com/~sullrich/openvpn.inc.txt

                              Reboot and see if they come up correctly now.

                              Thanks!

                              1 Reply Last reply Reply Quote 0
                              • B
                                Bredys
                                last edited by Mar 20, 2007, 5:00 PM

                                Oh yes, this help to solve my problem!

                                ;D

                                Now i can connect to my pfsense box after restart via openvpn without any problems!

                                1 Reply Last reply Reply Quote 0
                                • S
                                  sullrich
                                  last edited by Mar 20, 2007, 5:01 PM

                                  Great!  I'll commit now.

                                  1 Reply Last reply Reply Quote 0
                                  • B
                                    Bredys
                                    last edited by Mar 20, 2007, 5:11 PM

                                    And thank you and sh_man very much for your help and time…

                                    1 Reply Last reply Reply Quote 0
                                    20 out of 20
                                    • First post
                                      20/20
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                      This community forum collects and processes your personal information.
                                      consent.not_received