Re: UDP 1194 usage by several NAT devices
Michael <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <[email protected]> |
Hello Jakob, An mar., juin 29, 2010, Jakob Schwienbacher schrieb: >On 29 June 2010 11:42, Michael <[email protected]> wrote: >> [...] >> >> If I swap the m0n0wall router out for a cheap home router that does >> full cone NAT then all devices can connect to the OpenVPN server. >> >> [...] >> >> The router (and NAT) configuration: >> >>  M0n0wall 1.32 embedded >> >>  Services: Proxy ARP    - No entries >>  Firewall: NAT: Inbound   - No entries >>  Firewall: NAT: Server NAT - No entries >>  Firewall: NAT: 1:1     - No entries >> >>  Firewall: NAT: Outbound  - ... >>   X 'Enable advanced outbound NAT' >>   Interface  Source      Destination  Target >>   WAN     192.168.1.0/24  *       * (no portmap) >> >> With this config I can connect one OpenVPN device, but the others >> fail to connect. There are no other problems, NAT or otherwise. >> >Do you need the "Advanced outbound NAT" enabled? I have it just >disabled and everythig works fine. > Good question. At least after I disable that, more than one device can connect to the OpenVPN server, so the problem is solved. The only question now is that I have a gut feeling that 'Advanced outbound NAT' was enabled in the first place for a good reason. That means I'll keep testing and hopefully discover that it can be left disabled on my network. Regards and thanks a lot, Michael