Help needed - How to use a jail as gateway for internal LAN

[s0mm3r]

I've installed openvpn client in a jail - which is working fine (guide)

now I want to use the vpn connection with the deluge jail

Following the FreeBSD as router guideline
I've set gateway_enable="YES" in /etc/rc.conf
and set the vpn jail as gateway in deluge

but I cannot reach any destination
traceroute from deluge client:

Code:

root@deluge_1:/ # traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 64 hops max, 40 byte packets
1  192.168.178.247 (192.168.178.247)  0.101 ms  0.050 ms  0.046 ms
2  * * *
3  * * *
4  *
^C
root@deluge_1:/ #

traceroute from openvpn client:

Code:

root@openvpn_1:/ # traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 64 hops max, 40 byte packets
1  10.8.0.1 (10.8.0.1)  32.404 ms  32.051 ms  33.913 ms
2  gw.ipv4.xxx.net (x.x.202.1)  33.877 ms  31.707 ms  31.016 ms
3  ip-77-21.xxx.net (x.x.77.21)  32.146 ms  33.688 ms  33.707 ms
4  cloudflare.xxx.net (x.x.198.68)  31.885 ms  33.228 ms  31.819 ms
5  one.one.one.one (1.1.1.1)  34.249 ms  33.530 ms  31.195 ms
root@openvpn_1:/ #

I've tried to enable the firewall following this guide: step-by-step-to-install-openvpn-inside-a-jail
but still no luck

what am I missing?

thanks

 

[dlavigne]

Were you able to resolve this?

 

[s0mm3r]

nope
I ended up installing the vpn client in each jail I want to use it
I wanted to avoid this intentionally...

 

[LeoSum]

Hi @s0mm3r ,
you can have a look at my setup which I describe here:
https://forums.freebsd.org/threads/jail-as-openvpn-gateway-with-killswitch-95-done.69913/

So far it works, but I am just missing one last step to be entirely happy.
I would still like to achieve a setup that cuts any gatewaying activity whenever the vpn is down.

If that is not important to you, you should be able to copy paste my stuff.
Let me know if you need help.

 

[s0mm3r]

thanks @LeoSum I will look into it