Site to Site OpenVPN - private ports/firewall

Ninopi

Hello,
I build a site to site VPN. On the server site i have a DD-WRT Router behind a FritzBox. The DD-WRT router represents the server. On the remote site we have a pfSense as the OpenVPN client behind a telekom hybrid (LTE and DSL) router.

The open vpn connection is established and works well. But if i want to mount a samba share behind the pfsense, the windows firewall on the samba machine drops the packets. Because of that I don't get a credential request as well. If I disable the windows firewall I can mount the samba share.
When I check the log files of the windows firewall the dropped pakets got private ports. So, is this correct for a site to site vpn?
In this case I have to create a inbound rule of the windows firewall which allow connections between this to private subnets and the whole private port.

Thanks for your help...

TinCanTech

It sounds like you have done it correctly .. yes you do need windows firewall rules as you have found.