have the following challenge: I have an IPfire that I want to reach from the Internet with OpenVPN (on the IPfire).
The connection I have is a dual stack lite. I have created a DynDNS and the access to the fritzbox (only via IPv6) works. But the port forwarding I created to the ipfire does not work. The OpenVPN server on the IPfire is running. This is what my network looks like
.
What could be the reason?
Please advise.
Here is some additional information.
You are showing an IPFIre port forward firewall rule for the OpenVPN tunnel. This is not needed as when you enable the OpenVPN server the required firewall rules are automaticaly put in place.
Have you also put a port forward firewall rule into your Fritzbox?
Normally with the two routers situation the simplest approach would be to put the other router/modem into bridge mode but from what I remember the Fritzbox doesn’t allow that so a port forward rule in the fritzbox, for the openvpn connection, is required.
If you already have a port forward in the fritzbox then look through the OpenVPN Server System Logs in the WUI to see if any traffic is getting to IPFire or not.
DS-Lite won’t work
IFire does not support IPv6 (yet), so access from the internet over IPv6 or Dual-Stack-Lite will definitely not work, you would need pure IPv4 or “full” dual stack.
This and what @bonnietwin said… but because Bridge-Mode in FritzBox is getting more and more difficult to set up, I recommend a simple Port-Forwarding Rule on Port 1194.
