Can OpenVpn Connect use lport??

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
Altaflux
OpenVpn Newbie
Posts: 5
Joined: Thu Apr 04, 2013 10:53 pm

Can OpenVpn Connect use lport??

Post by Altaflux » Sun Apr 14, 2013 5:19 pm

I have a firewall that will only let me connect if I am using an specific local UDP port. Aparently OpenVPN Connect can't handle lport in the ovpn file or so it seems. I have used OpenVpn For Android and that one lets me connect without issues because it can handle lport.

chilinux
OpenVPN Power User
Posts: 156
Joined: Thu Mar 28, 2013 8:31 am

Re: Can OpenVpn Connect use lport??

Post by chilinux » Sun Apr 14, 2013 8:52 pm

As I understand it, Android will not allow standard apps to bind to ports below 1024. You may want to make sure that your use of lport is for a port above that.

You may also want to take into account that if your Android device is connecting to an access point which is also performing NAT, that by nature of NAT the OpenVPN server may see the connection coming from a different local port than the one set by lport. This is because NAT will frequently change the source port number by creating it's own local random port for the session. For this reason, I would recommend not using lport or at least basing any firewall rules around lport.

Altaflux
OpenVpn Newbie
Posts: 5
Joined: Thu Apr 04, 2013 10:53 pm

Re: Can OpenVpn Connect use lport??

Post by Altaflux » Sun Apr 14, 2013 9:31 pm

Thanks for the response. I understand that android will not let me use ports below 1024, but I believe this is not the case. Another app called VPN for Android which is too a rootless GUI for VPN can use the lport without issues. My port is 9200 which is far above the limit. So my question is why VPN for Android can connect with my selected lport but not VPN Connect?

chilinux
OpenVPN Power User
Posts: 156
Joined: Thu Mar 28, 2013 8:31 am

Re: Can OpenVpn Connect use lport??

Post by chilinux » Tue Apr 16, 2013 7:58 am

Are you talking about OpenVPN for Android by Arne Schwabe?

I'm not sure why lport isn't implemented in OpenVPN Connect. It seems like the source code to the Android version of OpenVPN Connect is not available as no one responded to the request back in february for the code. Without the source code, it is hard to know why it was left out and even harder to patch it to correct it.

If Arne Schwabe's application works for you then you might be better off sticking with it for now.
Not only does it accomplish everything that OpenVPN Connect does but the source code for his app is available at: http://code.google.com/p/ics-openvpn/

Post Reply