Port forwarding issue (unless GluetunVPN's firewall is turned off) #586
-
|
Hi, Thank you again @qdm12 for your amazing work on this project. I am using your docker container on an Unraid machine but I encounter issues with port forwarding. I have already setup my VPN provider to forward some ports to my VPN clients, and I know it works. When I use GluetunVPN dock container as the network for another container, the forwarding works fine only if I set the 'FIREWALL' variable to 'off'. But as soon as I turn it back on, the ports turn unreachable. I tried messing around with other variables such as 'FIREWALL_INPUT_PORTS', 'FIREWALL_OUTBOUND_SUBNETS', or 'FIREWALL_VPN_INPUT_PORTS', but with no luck. Do you have any idea what am I doing wrong? Below is the command run by Unraid when root@localhost:# /usr/local/emhttp/plugins/dynamix.docker.manager/scripts/docker run -d
--name='GluetunVPN'
--net='bridge'
-e TZ="REDACTED"
-e HOST_OS="Unraid"
-e 'TZ'='REDACTED'
-e 'VPNSP'='torguard'
-e 'OPENVPN_USER'='REDACTED'
-e 'OPENVPN_PASSWORD'='REDACTED'
-e 'REGION'=''
-e 'SERVER_HOSTNAME'=''
-e 'SERVER_NAME'=''
-e 'OPENVPN_VERSION'='2.5'
-e 'PROTOCOL'='udp'
-e 'OPENVPN_FLAGS'=''
-e 'DOT'='off'
-e 'DOT_PROVIDERS'='quad9'
-e 'SHADOWSOCKS'='off'
-e 'SHADOWSOCKS_PASSWORD'=''
-e 'SHADOWSOCKS_METHOD'='chacha20-ietf-poly1305'
-e 'HTTPPROXY'='off'
-e 'HTTPPROXY_USER'=''
-e 'HTTPPROXY_PASSWORD'=''
-e 'FIREWALL_INPUT_PORTS'=''
-e 'FIREWALL_OUTBOUND_SUBNETS'=''
-e 'OPENVPN_CUSTOM_CONFIG'='/gluetun/torguard.ovpn'
-e 'VPN_TYPE'=''
-e 'FIREWALL'='off'
-e 'FIREWALL_DEBUG'='on'
-e 'FIREWALL_VPN_INPUT_PORTS'=''
-e 'PUBLICIP_FILE'='/gluetun/ip'
-e 'SHADOWSOCKS_ADDRESS'='8388'
-e 'HTTPPROXY_STEALTH'='off'
-e 'SHADOWSOCKS_LOG'='off'
-e 'HTTPPROXY_PORT'='8888'
-e 'HTTPPROXY_LOG'='off'
-e 'FIREWALL_DEBUG'='off'
-e 'HTTP_CONTROL_SERVER_PORT'='8000'
-e 'HTTP_CONTROL_SERVER_LOG'='on'
-e 'PUID'='1000'
-e 'PGID'='1000'
-p '8888:8888/tcp'
-p '8388:8388/tcp'
-p '8388:8388/udp'
-p '8000:8000/tcp'
-p '52911:5600/tcp'
-p '52912:5601/tcp'
-p '52919:21248/tcp'
-p '52919:21248/udp'
-p '52918:21249/tcp'
-p '52331:9091/tcp'
-p '52339:51413/tcp'
-p '52339:51413/udp'
-v '/mnt/user/appdata/gluetun':'/gluetun':'rw'
--cap-add=NET_ADMIN
--restart always 'qmcgaw/gluetun' Many thanks ! |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 10 replies
-
|
Ah bummer; usually it's What's your forwarded port? Also what's the output of |
Beta Was this translation helpful? Give feedback.
-
|
Strange indeed I don't know why it uses I'll push some debug image with additional logs tomorrow to find why it does that (afk now) |
Beta Was this translation helpful? Give feedback.
-
|
Actually from your logs, it shows in the settings tree Are you certain you are not using |
Beta Was this translation helpful? Give feedback.
-
|
@qdm12, Thank you again so much for the time spent trying to fix my issue. I think I have identified the root cause. When I added the This resulted in the following parameter being used when pulling the docker container:
instead of:
(notice that the slight space after the word "PORTS" is no longer present). Now, obviously, the command I feel really dumb and very sorry for wasting your time. I made a small donation to the project to relieve my conscience :) Kind regards, |
Beta Was this translation helpful? Give feedback.
-
|
Haha thanks and no worry! Are you using the Unraid template from #550 by the way? |
Beta Was this translation helpful? Give feedback.
-
Absolutely |
Beta Was this translation helpful? Give feedback.
Ah bummer; usually it's
FIREWALL_VPN_INPUT_PORTSthat allows it through the firewall.What's your forwarded port?
Also what's the output of
docker exec GluetunVPN iptables -nvL? We might see where it gets blocked maybe.