[kwlug-disc] pfSense port forwarding over OpenVPN

Giles Malet gdmalet at gmail.com
Tue Jan 28 14:22:04 EST 2020


On 2020-01-27 2:18 p.m., bob+kwlug at softscape.ca wrote:
> The first thing that came to mind is that it is something to do with the source IP of the incoming connections

It's possible such packets are being treated as "martians" and dropped. 
If you search for that phrase you'll find options to allow them, or log 
them, etc.

Such as:

# echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter
# echo 0 > /proc/sys/net/ipv4/conf/default/rp_filter
# echo 0 > /proc/sys/net/ipv4/conf/$EXTETH/rp_filter

and

# echo 0 >/proc/sys/net/ipv4/conf/tun0/log_martians

This is the first link I found:

https://www.linuxquestions.org/questions/linux-networking-3/how-to-disable-the-default-drop-of-martian-packets-937275/

g




More information about the kwlug-disc mailing list