Transmission jail, OpenVPN and No IP

[foonji]

Hi all, hoping to find some help with OpenVPN in a jail. I've looked at several of the guides on this forum and followed them, however am running into the same issue. I'm no expert at this and i'm stumped. It feels like there must be further setup to be done that i'm missing.

When OpenVPN is running I can't access the outside world (with it stopped I can), can't ping anything, and trying "wget http://smart-ip.net/myip -O - -q ; echo" comes back with no results.

The openVPN log shows it is connecting, and ifconfig shows the tun interface is there.

Any ideas on what may be causing this or what I need to do next?

I'm running the latest 9.3 stable release.

OpenVPN Log:

Wed May 27 21:55:03 2015 OpenVPN 2.3.6 amd64-portbld-freebsd9.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on May 26 2015
Wed May 27 21:55:03 2015 library versions: OpenSSL 0.9.8za-freebsd 5 Jun 2014, LZO 2.09
Wed May 27 21:55:03 2015 WARNING: file '/usr/local/etc/openvpn/pass.txt' is group or others accessible
Wed May 27 21:55:03 2015 UDPv4 link local: [undef]
Wed May 27 21:55:03 2015 UDPv4 link remote: [AF_INET]81.x.x.x:1194
Wed May 27 21:55:03 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed May 27 21:55:07 2015 [Private Internet Access] Peer Connection Initiated with [AF_INET]81.x.x.x:1194
Wed May 27 21:55:10 2015 TUN/TAP device /dev/tun0 opened
Wed May 27 21:55:10 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed May 27 21:55:10 2015 /sbin/ifconfig tun0 10.x.x.x 10.x.x.x mtu 1500 netmask 255.255.255.255 up
add net 81.x.x.x: gateway 192.x.x.x
add net 0.0.0.0: gateway 10.x.x.x
add net 128.0.0.0: gateway 10.x.x.x
add net 10.x.x.x: gateway 10.x.x.x
Wed May 27 21:55:10 2015 Initialization Sequence Completed

 

[KelvinSmith]

You should have a tun0 interface with a valid internal PIA IP address.
Confirm your VPN is working correctly by hitting a site that will echo your IP back.

 

[foonji]

As I said in my initial post, yes there is a tun0 with valid IPs, and yes I have tried hitting a site that echoes back the IP with no success.

 

[Rilo Ravestein]

Can you list the output of ifconfig with vpn running? Also, do you have a firewall running? If so, can you list your rules?

 

[foonji]

Hi Rilo - Sorry I haven't replied earlier as I have been away.

No ipfw rules running, but here's the Ifconfig:

root@transmission_1:/ # ifconfig

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384

options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

inet 127.0.0.1 netmask 0xff000000

nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

epair1b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=8<VLAN_MTU>

ether 02:b9:7c:00:0c:0b

inet 192.168.1.242 netmask 0xffffff00 broadcast 192.168.1.255

inet6 2001:44b8:f02:c00:: prefixlen 64

nd6 options=9<PERFORMNUD,IFDISABLED>

media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)

status: active

tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500

options=80000<LINKSTATE>

inet 10.181.1.6 --> 10.181.1.5 netmask 0xffffffff

nd6 options=1<PERFORMNUD>

Opened by PID 6225

 

[Rilo Ravestein]

I really don't see any problems here. Maybe ask in the original thread? Probably someone over there knows more ways to debug this.

 

[foonji]

No worries, thanks for looking :) Have posted on the original thread earlier, but haven't had any luck with anyone.