OpenVPN: natd blocks traffic to/from bge0 after upgrading from 13.5 to 15.0

Hi all. I've got a strange issue that I hope someone can help with.

I have had an OpenVPN server running on 13.5-RELEASE for many years, and I recently decided it was time to update to 15.0-RELEASE.

Everything went fine, but when I rebooted I couldn't look up any hostnames, or even ping local machines on my LAN. Nor could I ssh to the box from another machine.

By process of elimination, I worked out that natd was responsible. Here is the relevant part of my rc.conf with the natd parts commented out:

Code:
# OpenVPN
firewall_enable="YES"
firewall_type="open"
firewall_logging="NO"
gateway_enable="YES"
#natd_enable="YES"
#natd_interface="bge0"
#natd_flags="-dynamic -m"
openvpn_enable="YES"
openvpn_configfile="/usr/local/etc/openvpn/server/server.conf"

OpenVPN still accepts connections with natd disabled, but nothing is routed (as expected).

net.inet.ip.forwarding is set as follows:

Code:
net.inet.ip.forwarding: 1

Does anyone know how to fix this? Has natd maybe changed between FreeBSD 13.x and 15.x?

I've attached my server.conf in case it helps.

If anyone has any suggestions, they would be greatly appreciated.
 

Attachments

Back
Top