Port of server is not accessible
yshinkarev opened this issue · comments
Hi, thanks for the script.
I have a strange issue with my vps.
I have installed openvpn (10.8.0.0/24) and wireguard (10.7.0.0/24) to my vps by your scripts (openvpn-install and wireguard-install).
Also I have installed transmission.
I can access to transmission by rpc over 10.8.0.1:9091 (openvpn). But I can't same access over wireguard 10.7.0.1:9091.
I have next settings in my transmission:
"rpc-whitelist": "10.8.0.*,10.7.0.*" "rpc-bind-address": "0.0.0.0"
Client config:
`
[Interface]
Address = 10.7.0.2/24
DNS = 8.8.8.8, 8.8.4.4,
PrivateKey =
[Peer]
PublicKey =
PresharedKey =
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = :51820
PersistentKeepalive = 25
`
Seems, port 9091 is blocked from client to server.
Сurious, some ports are not blocked.
I scaned ports by nmap and got opened ports: ftp, http (80, 443), ssh, iperf, transmission peer port.
This sounds like a Firewall Problem to me.
On the Server:
# Show all Firewall Rules and ignore all lines without 9091
iptables -nvL | grep 9091
If there is no output, then the Problem ist noch caused by the Firewall.
If there is output you need to further analyze your Firewall Rules.
# Get all Traffic on the Wireguard Interface, that comes from your client and wants to reach Port 9091
tcpdump -i <WG Interface> -nn -s0 dst port 9091 and src <WG Client>
-> If you don't see any output while trying to connect to 9091, then the traffic gets lost somewhere before
KaeTuuN, oh my god, I'm stupid.
I forgot that I added rule for ufw for openvpn.
Now I add rule for 10.7.0.0/24 and can open transmission by rpc.
Sorry to disturb you.