<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[[pfsense 1.0.1] openvpn ubuntu dapper]]></title><description><![CDATA[<p dir="auto">there's some howto's to make a vpn with openvpn between an pfsense 1.0.1 and an ubuntu dapper server?<br />
thanks<br />
bat<br />
from italy</p>
]]></description><link>https://forum.netgate.com/topic/3953/pfsense-1-0-1-openvpn-ubuntu-dapper</link><generator>RSS for Node</generator><lastBuildDate>Sat, 06 Jun 2026 10:31:22 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/3953.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 27 Mar 2007 01:09:33 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to [pfsense 1.0.1] openvpn ubuntu dapper on Thu, 29 Mar 2007 15:24:40 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/battistis">@<bdi>battistis</bdi></a>:</p>
<blockquote>
<p dir="auto">why it works well with windows and not whit linux (u.dapper)  :'(</p>
</blockquote>
<p dir="auto">Might want to ask that on a Ubuntu forum.  If it works with windows, well…</p>
]]></description><link>https://forum.netgate.com/post/152102</link><guid isPermaLink="true">https://forum.netgate.com/post/152102</guid><dc:creator><![CDATA[sullrich]]></dc:creator><pubDate>Thu, 29 Mar 2007 15:24:40 GMT</pubDate></item><item><title><![CDATA[Reply to [pfsense 1.0.1] openvpn ubuntu dapper on Thu, 29 Mar 2007 06:52:01 GMT]]></title><description><![CDATA[<p dir="auto">why it works well with windows and not whit linux (u.dapper)  :'(</p>
]]></description><link>https://forum.netgate.com/post/152081</link><guid isPermaLink="true">https://forum.netgate.com/post/152081</guid><dc:creator><![CDATA[battistis]]></dc:creator><pubDate>Thu, 29 Mar 2007 06:52:01 GMT</pubDate></item><item><title><![CDATA[Reply to [pfsense 1.0.1] openvpn ubuntu dapper on Wed, 28 Mar 2007 17:37:37 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/hoba">@<bdi>hoba</bdi></a>:</p>
<blockquote>
<p dir="auto">Not sure how dapper fits into this scheme</p>
</blockquote>
<p dir="auto">to make a situation like this</p>
<p dir="auto">internet -&gt; pfsenseGw (pubblic IP) &lt;-  … openvpn tunnel ...-&gt; natted ubuntu dapper</p>
<p dir="auto">p-to-p openvpn tunnel with simple shared secret key<br />
forward specific traffic (http 80, passive ftp 21) from internet to the natted ubuntu dapper</p>
<p dir="auto">it's possibile to make it work witch pfsense 1.0.1 ?<br />
this parameters in the web interface are correct?</p>
<pre><code>
Proto UDP
l.port 1194 
A.pool 10.0.8.1/30
crypto BF-CBC 128bit
Auth.metod shared key

#
	# 2048 bit OpenVPN static key
	#
	-----BEGIN OpenVPN Static key V1-----
cut
        -----END OpenVPN Static key V1-----
#

Custom options

</code></pre>
<p dir="auto">The udp 1194 open on the wan interface<br />
and the client config like something this</p>
<pre><code>
remote 31.1.2.133 1194
port 1194 
dev tun
ifconfig 10.0.8.2 10.0.8.1
#dev-node ovpn
proto udp
ping 10
secret /etc/openvpn/udugw/static.key
persist-tun
persist-key
#tls-client 
#ca ca.crt
#cert client1.crt
#key client1.key
#ns-cert-type server
#comp-lzo
#pull
log /var/log/openvpn.log
verb 3

</code></pre>
<p dir="auto">not work :(</p>
<p dir="auto">the connection was active<br />
client:<br />
-```<br />
$ /etc/init.d/openvpn restart<br />
Stopping virtual private network daemon: client.<br />
Starting virtual private network daemon: client(OK)</p>
<pre><code>
and the tun interface up
</code></pre>
<p dir="auto">$ ifconfig tun0<br />
tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 <br />
          inet addr:10.0.8.2  P-t-P:10.0.8.1  Mask:255.255.255.255<br />
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1<br />
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0<br />
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<br />
          collisions:0 txqueuelen:100<br />
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)</p>
<pre><code>
-pftop (really great! :)) server:

udp      In  31.X.X.X:1194          193.X.X.X:1194            MULTIPLE:MULTIPLE 

but the client can't ping the server by the tunnel
</code></pre>
<p dir="auto">$ ping 10.0.8.1<br />
PING 10.0.8.1 (10.0.8.1) 56(84) bytes of data.<br />
From 10.0.8.2 icmp_seq=1 Destination Host Unreachable</p>
<pre><code>
and similar the server can't ping the client by the tunnel
</code></pre>
<h1><a class="anchor-offset" name="ping-10.0.8.2"></a>ping 10.0.8.2</h1>
<p dir="auto">PING 10.0.8.2 (10.0.8.2): 56 data bytes<br />
92 bytes from 10.0.8.2: Destination Host Unreachable<br />
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst<br />
4  5  00 5400 5f56   0 0000  40  01 f750 10.0.8.1  10.0.8.2</p>
<pre><code></code></pre>
]]></description><link>https://forum.netgate.com/post/152019</link><guid isPermaLink="true">https://forum.netgate.com/post/152019</guid><dc:creator><![CDATA[battistis]]></dc:creator><pubDate>Wed, 28 Mar 2007 17:37:37 GMT</pubDate></item><item><title><![CDATA[Reply to [pfsense 1.0.1] openvpn ubuntu dapper on Wed, 28 Mar 2007 16:49:53 GMT]]></title><description><![CDATA[<p dir="auto">tnx for the reply<br />
in effect I can use this conf for /etc/openvpn/client.conf<br />
founded in your posted link</p>
<pre><code>
port 1194 
dev tun 
dev-node ovpn 
proto udp 
remote your.pfsense.box 1194 
ping 10 
persist-tun 
persist-key 
tls-client 
ca ca.crt 
cert client1.crt 
key client1.key 
ns-cert-type server 
comp-lzo 
pull 
#verb 5

</code></pre>
]]></description><link>https://forum.netgate.com/post/152015</link><guid isPermaLink="true">https://forum.netgate.com/post/152015</guid><dc:creator><![CDATA[battistis]]></dc:creator><pubDate>Wed, 28 Mar 2007 16:49:53 GMT</pubDate></item><item><title><![CDATA[Reply to [pfsense 1.0.1] openvpn ubuntu dapper on Tue, 27 Mar 2007 14:30:16 GMT]]></title><description><![CDATA[<p dir="auto">Not sure how dapper fits into this scheme but maybe with some abstraction you can make it work:<br />
http://doc.pfsense.org/index.php/Setting_up_OpenVPN_with_pfSense</p>
]]></description><link>https://forum.netgate.com/post/151906</link><guid isPermaLink="true">https://forum.netgate.com/post/151906</guid><dc:creator><![CDATA[hoba]]></dc:creator><pubDate>Tue, 27 Mar 2007 14:30:16 GMT</pubDate></item><item><title><![CDATA[Reply to [pfsense 1.0.1] openvpn ubuntu dapper on Tue, 27 Mar 2007 13:07:16 GMT]]></title><description><![CDATA[<p dir="auto">or something similar that can i use to make it works<br />
up</p>
]]></description><link>https://forum.netgate.com/post/151902</link><guid isPermaLink="true">https://forum.netgate.com/post/151902</guid><dc:creator><![CDATA[battistis]]></dc:creator><pubDate>Tue, 27 Mar 2007 13:07:16 GMT</pubDate></item></channel></rss>