OSMC on PI2 and OPENVPN client : unable to connect to the PI from outside the LAN (ssh, transmission, ...)

[dillthedog]

@ptimax

Here my “route -n” result :

Table de routage IP du noyau
Destination     Passerelle      Genmask         Indic Metric Ref    Use Iface
0.0.0.0         10.10.0.21      128.0.0.0       UG    0      0        0 tun0
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
10.10.0.1       10.10.0.21      255.255.255.255 UGH   0      0        0 tun0
10.10.0.21      0.0.0.0         255.255.255.255 UH    0      0        0 tun0
128.0.0.0       10.10.0.21      128.0.0.0       UG    0      0        0 tun0
151.80.10.10    192.168.1.1     255.255.255.255 UGH   0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.1.1     0.0.0.0         255.255.255.255 UH    0      0        0 eth0

That looks fine.

@ptimax

Another information, I’ve dcpdump the pi connected to the vpn and when i call it from outside (internet) I see inbound requests but no outbound responses whereas when I call it form inside (LAN) I see inbound requests and outbound responses…

Your problem – which I don’t actually have – is that when you SSH to the Pi, the return path is probably being sent through the VPN tunnel, rather than back through the eth0 interface. Since your routing table has this line:

192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0

which says that traffic to IP addresses 192.168.1.* should be sent to eth0, it looks like your router might not be NAT-ing (also known as masquerading) the port-forwarded traffic.

It should be possible to add some rules to the Pi but first, preferably with the VPN running, please run netstat -tn from the command line on OSMC and from another session try to SSH from an outside IP address (eg through a VPN). Do you see anything trying to connect, even if it doesn’t succeed?