PF OpenVPN issues

M

monty20python

I can't seem to connect to the OpenVPN server I'm running on 10.2 though PF, I keep getting a tls-auth timeout.

Here's my pf.config:

Code: 
tcp_services = "{ssh, http, https}"
# vpn address block
vpnclients = "10.8.0.0/24"
# wan interface
wanint = "vtnet0"
#tunnel interface
vpnint = "tun0"
# openvpn port
udpopen = "{1194}"
icmptypes = "{echoreq, unreach}"

# bruteforce table for ssh protection
table <bruteforce> persist

# passthough on lo0 interface
set skip on lo0

# nat routing for vpn clients
nat on $wanint inet from $vpnclients to any -> $wanint

# block all incoming traffic pass out all traffic
block in all
pass out all keep state

# protect ssh with bruteforce table
pass quick proto { tcp, udp } from any to any port ssh flags S/SA keep state (max-src-conn 15, max-src-conn-rate 5/3,
overload <bruteforce> flush global)

# pass in tpc/udp services
pass in on $wanint proto udp from any to $wanint port $udpopen
pass in on $wanint proto tcp to any port $tcp_services keep state

# pass in on tunnel interface
pass in on $vpnint from any to any

# let icmp through
pass in inet proto icmp all icmp-type $icmptypes

I'm running this on a digital ocean droplet and my network interfaces are vtnet0, vtnet1, lo0, pflog0, and tun0. Any help would be appreciated.
 
Finally got it working, the script I was using to change vars from export to setenv didn't work apparently, changed to bash and it worked. I also may have not included ca.crt in the client file. Anyways thanks for the tip!
 
You must log in or register to reply here.
Back
Top