Hi, I'm running OpenVPN on a Raspberry Pi 3 running Raspian and using a iPhone 6 client. After getting assistance in https://forums.openvpn.net/topic21502.html I was able to connect successfully and access the internet through my vpn. My problem is that the firewall rules from my interfaces is not being applied on reboot. However, the rules do get applied if I execute the following manually from the etc directory: sudo ./firewall-openvpn.rules.sh . Any help would be greatly appreciated. Thanks /etc/firewall-openvpn-rules.sh [code] #!/bin/sh iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE [/code] interfaces [code] source-directory /etc/network/interfaces.d auto lo iface lo inet loopback iface eth0 inet static pre-up /etc/firewall-openvpn-rules.sh allow-hotplug wlan0 iface wlan0 inet manual wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf allow-hotplug wlan1 iface wlan1 inet manual wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf [/code] iptables -L -v -t nat ( After reboot ) [code] Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination [/code] iptables -L -v -t nat ( after executing: sudo ./firewall-openvpn.rules.sh ) [code] Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 1 packets, 76 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 1 packets, 76 bytes) pkts bytes target prot opt in out source destination 0 0 MASQUERADE all -- any eth0 10.8.0.0/24 anywhere [/code]

sudo stat /proc/1/exe [code] File: '/proc/1/exe' -> '/lib/systemd/ [/code]

Firewall rules from interfaces not being applied on reboot

bonked

Hi,

I'm running OpenVPN on a Raspberry Pi 3 running Raspian and using a iPhone 6 client. After getting assistance in https://forums.openvpn.net/topic21502.html I was able to connect successfully and access the internet through my vpn. My problem is that the firewall rules from my interfaces is not being applied on reboot. However, the rules do get applied if I execute the following manually from the etc directory: sudo ./firewall-openvpn.rules.sh . Any help would be greatly appreciated. Thanks

/etc/firewall-openvpn-rules.sh

#!/bin/sh
iptables -t nat -A POSTROUTING -s 10.8.0.0/24  -o eth0 -j MASQUERADE

interfaces

source-directory /etc/network/interfaces.d

auto lo
iface lo inet loopback

iface eth0 inet static
    pre-up /etc/firewall-openvpn-rules.sh

allow-hotplug wlan0
iface wlan0 inet manual
    wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf

allow-hotplug wlan1
iface wlan1 inet manual
    wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf

iptables -L -v -t nat ( After reboot )

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

iptables -L -v -t nat ( after executing: sudo ./firewall-openvpn.rules.sh )

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain OUTPUT (policy ACCEPT 1 packets, 76 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain POSTROUTING (policy ACCEPT 1 packets, 76 bytes)
 pkts bytes target     prot opt in     out     source               destination 
    0     0 MASQUERADE  all  --  any    eth0    10.8.0.0/24          anywhere

Traffic

bonked wroterunning OpenVPN on a Raspberry Pi 3 running Raspian <..> My problem is that the firewall rules from my interfaces is not being applied on reboot

What init system does Raspbian use ?

bonked

sudo stat /proc/1/exe

  File: '/proc/1/exe' -> '/lib/systemd/

bonked

I'm embarrassed to say that the issue was due to a typo in my firewall rules file name.

Was:
Firewall-openvpn.rules.sh

Should have been:
Firewall-openvpn-rules.sh

And I don't want to admit how long I looked at this before noticing. Thanks for you help though.

Traffic

Thanks for letting us know your solution 8-)