Trying to set lport / source port OpenVPN Connect 2.x

sharewd

Hi guys,

At school I'm after an annoying firewall, it's impossible to connect to my OpenVPN-server. The Network Admin said me to use TCP port 443, that port can be used to connect to my server. So I set 'port 443' in my *.ovpn-file, but Wireshark shows me that OpenVPN Connect uses TCP port 56774 instead of TCP port 443. How can I fix that?

Kind regards,

Gert

Traffic

Please post your client config file.

sharewd

Traffic wrotePlease post your client config file.

I skipped the certificates/keys, this is what you need I think:

setenv FORWARD_COMPATIBLE 1

client

proto tcp

remote <<MY_IP>>

port 443

dev tun

dev-type tun

ns-cert-type server

#reneg-sec 604800
reneg-sec 3600

sndbuf 100000

rcvbuf 100000

# NOTE: LZO commands are pushed by the Access Server at connect time.

# NOTE: The below line doesn't disable LZO.

comp-lzo no

verb 3

setenv PUSH_PEER_INFO

Traffic

Replace this:

sharewd wroteproto tcp

remote <<MY_IP>>

port 443

with this:

proto tcp-client

remote <<MY_IP>> 443

and add this:

nobind

sharewd

Thanks for your reply, I tested the new configuration with Wireshark. It says: "Transmission Control Protocol, Src Port: 55019 (55019), Dst Port: https (443), Seq: 133, Ack: 1, Len: 0". So, OpenVPN tries to connect to remote port 443 by local port 55019. I want that local port also set to 443, is that possible?

Traffic

sharewd wroteOpenVPN tries to connect to remote port 443 by local port 55019

This is the correct way ..

sharewd wroteI want that local port also set to 443, is that possible?

This is possible but not theoretically correct.

Set --port 443 in the client config and it will use both local and remote port 443.

You may want to See --port in The Manual v23x

sharewd

Okay, thanks. I tried your solution but OpenVPN still uses a high-numbered port. Also tried with and without 'nobind', tried 'lport' and 'port' but nothing seems te change the local port. Any other ideas probably?

Traffic

sharewd wrote# NOTE: LZO commands are pushed by the Access Server at connect time.

What version of openvpn do you use for your server and client ?