openvpn running but no internet connection when firewall is running

lowendguy7

I managed to get openvpn running as well as be able to ssh in without getting booted with the help of a user on here however I still cannot access the internet when the firewall is up. When I ping/ip test from the command line without firewall it pings and shows the new ip respectively; however with firewall up both just timeout.

I added some ports which I read were the ones for openvpn in csf.conf like so

# Allow incoming TCP ports
TCP_IN = "22,22000"

# Allow outgoing TCP ports
TCP_OUT = "20,21,22,25,53,80,110,113,443,587,993,995,1194,22000"

# Allow incoming UDP ports
UDP_IN = "20,21,53,22027"

# Allow outgoing UDP ports
# To allow outgoing traceroute add 33434:33523 to this list
UDP_OUT = "20,21,53,113,123,1194,22027"

What to try next?

This sounded like just the ticket but alas I just tried it and it didn't work.

I've been adding alot of crap to iptables randomly from different places so I need to clean it up at some point but so far non have solved the issue.

fitvpn

Ask provider to open OpenVPN ports 1194 and 443 from their side if they use firewall

lowendguy7

It cant be that cos as I said it works fine when I turn off csf on my end.

fitvpn

lowendguy7 said: it works fine when I turn off csf on my end

Trash your firewall than find a new one. If you use McAfee trash this shit.

budi1413

@lowendguy7 said:
It cant be that cos as I said it works fine when I turn off csf on my end.

Do you add that csf.pre stuff?

MrObvious

@fitvpn said:

lowendguy7 said: it works fine when I turn off csf on my end

Trash your firewall than find a new one. If you use McAfee trash this shit.

He's using iptables you fucking imbecile.

fitvpn

MrObvious said: MrObvious

fuck u with IP tables both

lowendguy7

I would not have put it so bluntly but ye . I thought the first comment by him might have just been a fluke from not reading the message properly but no it just got worse :P

@MrObvious said:

@fitvpn said:

lowendguy7 said: it works fine when I turn off csf on my end

Trash your firewall than find a new one. If you use McAfee trash this shit.

He's using iptables you fucking imbecile.

lowendguy7

@budi1413 said:

@lowendguy7 said:
It cant be that cos as I said it works fine when I turn off csf on my end.

Do you add that csf.pre stuff?

I have some dude helped the last few days so hopefully will get to the bottom of it soon. was spending alot of time pinging with things turned on/off one at a time to find just what is causing the block. Making some progress but not got to the root yet.

fitvpn

Sarkasm, sarkasm, some stupid

Nyr

You just need to allow the NAT from the private subnet to the public IP and whatever port is OpenVPN listening on.