Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN not working after restart …

    OpenVPN
    3
    20
    8.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      Bredys
      last edited by

      OpenVPN traffic is blocked after restart… I must open ANY wan or lan rule, click save and then apply for unblocking openvpn.

      1 Reply Last reply Reply Quote 0
      • S
        sh_man
        last edited by

        Exactly which version and build of pfSense are you running?

        1 Reply Last reply Reply Quote 0
        • B
          Bredys
          last edited by

          PC Version
          1.0.1-SNAPSHOT-03-15-2007
          built on Mon Mar 19 13:32:03 EDT 2007

          1 Reply Last reply Reply Quote 0
          • S
            sh_man
            last edited by

            If you run pfctl -sr | grep tun from SSH before you save/apply the rule I presume you do NOT get two lines like this:-

            pass out quick on tunx all keep state label "let out anything from firewall host itself openvpn"
            pass in quick on tunx all keep state label "let out anything from firewall host itself openvpn"

            where tunx is the OpenVPN tunnel (if you only have one it will be tun0)

            and after save/apply rule you DO get two lines like that.

            1 Reply Last reply Reply Quote 0
            • B
              Bredys
              last edited by

              As you say… (write) ...
              after restart there is no rule to pass traffic on tun interface...

              When i change rule and click apply ...

              pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
              pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

              1 Reply Last reply Reply Quote 0
              • S
                sullrich
                last edited by

                Try letting the system boot.  And then from a shell run:

                /etc/rc.filter_configure_sync

                Does this solve the issue?

                1 Reply Last reply Reply Quote 0
                • B
                  Bredys
                  last edited by

                  Yes, it solve my problem after reboot…

                  pfctl -sr | grep tun

                  /etc/rc.filter_configure_sync

                  pfctl -sr | grep tun

                  pass out quick on tun0 all keep state label "let out anything from firewall host itself openvpn"
                  pass in quick on tun0 all keep state label "let out anything from firewall host itself openvpn"

                  1 Reply Last reply Reply Quote 0
                  • S
                    sullrich
                    last edited by

                    Try this from a shell:

                    fetch -o /etc/inc/openvpn.inc http://www.pfsense.com/~sullrich/openvpn.inc.txt

                    Reboot and see if they come up correctly now.

                    Thanks!

                    1 Reply Last reply Reply Quote 0
                    • B
                      Bredys
                      last edited by

                      Oh yes, this help to solve my problem!

                      ;D

                      Now i can connect to my pfsense box after restart via openvpn without any problems!

                      1 Reply Last reply Reply Quote 0
                      • S
                        sullrich
                        last edited by

                        Great!  I'll commit now.

                        1 Reply Last reply Reply Quote 0
                        • B
                          Bredys
                          last edited by

                          And thank you and sh_man very much for your help and time…

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.