Cannot connect to my OVPN server

aure

Hi all,
I've recently setup an OVPN server on my raspberry pi with ubuntu using pivpn. It seems to be running fine, but I cannot connect to it. I made sure my router is forwarding the ports correctly (1194 TCP/UDP). I've opened port 1194 in the firewall and I can access other servers on the machine.

I cannot submit the logs in this post due to this error: "Forbidden. Contains contacts. Message seems to be spam." I will try to submit them as comments.

Here are the details I can submit:

* Server *

Operating system:

# uname -a
Linux ubuntu 4.15.0-1041-raspi2 #44-Ubuntu SMP PREEMPT Wed Jul 3 15:45:20 UTC 2019 aarch64 aarch64 aarch64 GNU/Linux

# sudo ufw status
Status: active

To                         Action      From
--                         ------      ----
1194/udp                   ALLOW       Anywhere                  
80/tcp                     ALLOW       Anywhere                  
443/tcp                    ALLOW       Anywhere                  
1194/tcp                   ALLOW       Anywhere                  
21/tcp                     ALLOW       Anywhere                  
22/tcp                     ALLOW       Anywhere                  
80/tcp (v6)                ALLOW       Anywhere (v6)             
443/tcp (v6)               ALLOW       Anywhere (v6)             
1194/tcp (v6)              ALLOW       Anywhere (v6)             
1194/udp (v6)              ALLOW       Anywhere (v6)             
21/tcp (v6)                ALLOW       Anywhere (v6)             
22/tcp (v6)                ALLOW       Anywhere (v6)             

Anywhere on eth0           ALLOW FWD   10.8.0.0/24 on tun0

* Client *

Operating system:

# uname -a
Linux rocinante 5.0.0-20-generic #21-Ubuntu SMP Mon Jun 24 09:32:09 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

aure

I am not able to post the server/client logs and configuration here do to this error: "Forbidden. Contains contacts. Message seems to be spam. "

So I posted them in a gist instead:
https://gist.github.com/au-re/43677009160e2adf7248a0aed2ed5be7

Thank you for your help!

TinCanTech

aure wrote I cannot connect to it. I made sure my router is forwarding the ports correctly (1194 TCP/UDP). I've opened port 1194 in the firewall

You have probably made a mistake here.

Your log shows that your client cannot reach your server.

aure

Thank you for the quick reply 😃

These are the settings for port forwarding on my router:

https://pasteboard.co/IpugME7.png

I found this command to check if it's possible to connect to a UDP socket and it seems to be working:

nc -z -v -u x.x.x.x 1194
Connection to x.x.x.x 1194 port [udp/openvpn] succeeded!

But the client can still not connect. Any idea how I could debug this?

TinCanTech

All I can say is that your client cannot reach your server .. may be you have an error in your --remote ip.address

aure

I ran

pivpn -d

and I saw there was a problem in the way I the firewall is configured. Running

sudo ufw reload

fixes the issue until reboot.

I found someone with the same issue here:
https://github.com/pivpn/pivpn/issues/643

So it's working now 😃