Here's the dump of tun0 showing packets going to the VNC service on tun0. Is anyone able to suggest pfctl or other fixes that allow VPN clients on tun0 to access services on the same VPN server available on interface en0? I'm not sure if packets are correctly crossing over between tun0 and en0 - the result is that services are not available to VPN clients. Tcpdump shows VNC packets going to the server on interface tun0, and leaving the VNC server on interface en0.
More details for those who'd be able to suggest a fix: IceFloor is a really nice GUI, but also has this issue, so this approach is missing some basic ingredient.įor example, hitting a VNC server while running tcpdump shows VNC packets going to the server on interface tun0, and leaving the VNC server on interface en0. Still some issues getting packets between VPN clients and services on the VPN Server. # Allow outgoing traffic from NAT'd port $lan_udp_services Load anchor "com.apple" from "/etc/pf.anchors/com.apple" Nat on $int_if from $localnet to any -> ($int_if) Int_if = "en0" # macro for internal interface I used the following script which I got from the OSX discussion:Ĭode: Select all # References for modifications: On pfctl, I forwarded UDP port 1194 in the setup.Īt this point, I'm not sure how I should troubleshoot this issue.ĮDIT: I think the issue has to do with how I setup osx to route vpn packets. It was working great for a while, but after setting up pfctl instead of ipfw, I can't seem to access anything on the local network or the internet when I attempt to connect from the outside.
I found a thread on apple discussions that was doing something very similar with iOS here. My goal is to be able to connect to both my local network at my house as well as the internet through the vpn connection. I'm currently setting up a openvpn server on my macmini server at my house. First of all, I am new to the server admin side of things, so pardon my lack of knowledge.
0 kommentar(er)
