Transmission OpenVPN - Different Subnet

[KieranEves]

Hi,

I have my Freenas box setup on a VLAN with an IP 192.168.30.XX and I can access the Freenas GUI, the Plex Jail and my ZoneMinder jail from a different VLAN (The rest of my network is on 192.168.1.XX).

What I don't seem to be able to do, is access transmission gui once OpenVPN starts. If I start the Transmission jail without OpenVPN then I can access the GUI. As soon as I start OpenVPN in the jail I can no longer access the GUI when on any IP address that isn't a 192.168.30.XX IP.

Any ideas what I need to do to enable access to the Transmission GUI with any IP address, even one on a different subnet?

I don't currently have any firewall rules set up using IPFW and have the whitelist set to false in the transmission config.

Thanks

 

[dlavigne]

Were you able to resolve this? If not, are there any entries in /var/log/messages when this condition occurs?

 

[waluigit]

With openvpn running, your jail's default route is through the VPN. It doesn't send local traffic (192.168.30.XX) through the VPN, but everything else goes through the VPN. You have to force your jail to route local traffic to your local default gateway with a static route.

If you followed this guide: https://old.reddit.com/r/freenas/comments/41fhz3/configuration_guide_for_openvpn_and_ipfw_so_that/
you'll have a file in your jail: /etc/ipfw.rules

Modify the following lines in the file from

Code:

$cmd 00101 allow all from me to 192.168.1.0/24 uid transmission
$cmd 00101 allow all from 192.168.1.0/24 to me uid transmission

to

Code:

$cmd 00101 allow all from me to 192.168.0.0/16 uid transmission
$cmd 00101 allow all from 192.168.0.0/16 to me uid transmission

This opens the firewall to allow traffic from your local subnets.

Then add a static route to your jail so that traffic bound to the 192.168.0.0/16 (which includes 192.168.30.XX and 192.168.1.XX) is sent to your local default router, not through the VPN.

In /etc/rc.conf

Code:

static_routes="internalnet"
route_internalnet="-net 192.168.0.0/16 <default gateway ip>"

Restart your jail and you should now be able to access the transmission gui.