openvpn

[michiel]

Hi, I try to get firewalld playing nice with openvpn but failed. I opened
the opevpn udp port but I think the tun interface needs some love. The vpn
is working when I disable firewalld.

Any pointers?

thx,
Michiel

[Thomas Woerner]

On 05/12/2014 02:53 PM, michiel karsch wrote:
> Hi, I try to get firewalld playing nice with openvpn but failed. I
> opened the opevpn udp port but I think the tun interface needs some
> love. The vpn is working when I disable firewalld.

In which zone have you enabled the port 1194/udp? BTW: There is already 
a service for openvpn: openvpn

Is this zone the default zone?
> Any pointers?
>
> thx,
> Michiel
>
> firewalld-users mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/firewalld-users

Regards,
Thomas

[michiel]

Thomas Woerner wrote:
> On 05/12/2014 02:53 PM, michiel karsch wrote:
> > Hi, I try to get firewalld playing nice with openvpn but failed. I
> > opened the opevpn udp port but I think the tun interface needs some
> > love. The vpn is working when I disable firewalld.
>
> In which zone have you enabled the port 1194/udp? BTW: There is 
> already a service for openvpn: openvpn

I've configured 2 zones: external and trusted and added eth1 (inet 
gateway) resp. and eth0 (lan).

<zone>
   <short>External</short>
   <service name="openvpnHi"/>
   <service name="http"/>
   <service name="ssh"/>
   <masquerade/>
</zone>

<service name="openvpnHi"/>
   <service name="http"/>
   <service name="ssh"/>
   <service name="openvpn"/>
   <masquerade/>

<zone target="ACCEPT">
   <short>Trusted</short>
   <description>All network connections are accepted.</description>
   <masquerade/>
   <forward-port to-addr="x.x.x.x." protocol="tcp" port="zzz"/>
</zone>

Service openvpnHi is a cpy of openvpn with another udp port.
> Is this zone the default zone?

No. I just left the default zone to, eh, default (public?).

--Michiel