Netgate SG-1000 microFirewall

Author Topic: Tutorial: Configuring pfSense as VPN client to Private Internet Access  (Read 197782 times)

0 Members and 2 Guests are viewing this topic.

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #255 on: March 04, 2016, 01:14:04 pm »
I did above it...

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 10257
  • Karma: +1175/-313
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #256 on: March 04, 2016, 01:14:55 pm »
With the rule disabled it's not going to work.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #257 on: March 04, 2016, 01:16:01 pm »
Yes, I know. I disabled it because I removed the route-nopull since I needed the VPN to be working.

I'll try again with route-nopull and enable the rule again.



Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #258 on: March 04, 2016, 01:20:23 pm »
Ok, so I have the rule enabled. I have the route-nopull option.

privateinternetaccess shows my VPN address and says I am protected.

However, 2 other sites for showing IP addresses are showing my ISP public address, not the VPN one :-(

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 10257
  • Karma: +1175/-313
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #259 on: March 04, 2016, 01:33:31 pm »
You sure your tunnel is staying up?

There's really nothing that can cause what you think you're seeing.

Unless there's something severely wrong with that beta version you're using.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #260 on: March 04, 2016, 01:34:43 pm »
I'm not sure. It seems to be staying up.

I realised that I also have a free ipVanish account, so I'll give things a whirl with that and see how I get on :-)

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 10257
  • Karma: +1175/-313
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #261 on: March 04, 2016, 02:51:37 pm »
Which IP test sites are showing the VPN address and which are showing WAN address?

Is it consistent?
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #262 on: March 04, 2016, 02:58:20 pm »
The ipvanish site shows that I am protected, and it is the correct VPN ip address.

The BBC iPlayer site refuses to work because it knows I am behind a VPN - which is expected behaviour.

However, www.whatsmyip.org shows my proper public IP address, and my ISP details.

Also, http://mxtoolbox.com/WhatIsMyIP/ shows my proper details, and not the VPN ip address.

Very odd.

I also deleted the config and reconfigured from scratch - same result.

If I remove the firewall rule and the route-nopull from the config, then I get consistent results that I behind the VPN.

Strange!

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 10257
  • Karma: +1175/-313
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #263 on: March 04, 2016, 03:23:49 pm »
Don't know what to tell you.

I just ran updates to my betas and tried it and it works just fine.

You'll have to look at states or something to see what's going on.  SOMETHING you have is routing traffic out the default gateway. Have you created any floating rules?

Are you positive about the source IP address?
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #264 on: March 04, 2016, 03:27:10 pm »
Unless of course it is going out using IPV6, but it shouldn't be - I have IPV4 as preferred.

I don't know if it makes any difference that the 192.168.1.15 server that I want protected with the VPN a) it's a VM and b) it has teamed NICs

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 10257
  • Karma: +1175/-313
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #265 on: March 04, 2016, 03:33:20 pm »
If it was going out IPv6 I think both of those sites would be showing you an IPv6 address.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 10257
  • Karma: +1175/-313
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #266 on: March 04, 2016, 03:42:21 pm »
I've never messed around with windows NIC teaming. If it utilizes multiple IP addresses there's your problem. Put them all in an alias and use that as your source address list. A packet capture on LAN will show you what's happening.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #267 on: March 04, 2016, 03:55:27 pm »
They are just teamed into one IP address.

It's very odd..

I've just gone back to having everything protected as that works fine.

Any idea how I can add a rule to get BBC iPlayer to bypass the VPN?

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #268 on: March 04, 2016, 03:59:48 pm »
It does also make me wonder if I have missed something, although I have redone the tutorial from scratch 3 times now.

Just to test, I created a rule for my client PC which is just normal PC single NIC and I get exactly the same results.

PIA website says I am protected and shows the VPN IP address. The others still display my ISP and unprotected public IP :-(

I am just baffled...
« Last Edit: March 04, 2016, 04:13:26 pm by psykix »

Offline psykix

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Tutorial: Configuring pfSense as VPN client to Private Internet Access
« Reply #269 on: March 04, 2016, 04:18:58 pm »
I just had a thought.. wouldn't be anything to do with Squid or Squidguard would it?

Aha..

Disabled Squid and it now all works as expected..

So do I have to change Squid to work on the VPN interface instead of LAN maybe?