VPN client problem

totoy · 2020-11-05T22:24:06.542Z

Hi,
I have an issue with the VPN client on GL.inet on many models (AR300, AR750).
My VPN provider give an public ip who is acces by internet directly. When connect it, the interface Luci is accessible and the samba share too.
Have you planning a correctif for that ?

Thanks

alzhao · 2020-11-07T10:52:50.471Z

Can you give more details including screenshot?

If it is private you can send us email support at gl-inet.com

totoy · 2020-11-07T11:58:46.534Z

For example, if my VPN provider gives me the address 11.11.11.11, when I type the url https://11.11.11.11/cgi-bin/luci in my web browser, i get the administration interface. If I perform a scan on the address 11.11.11.11, I see the port 139 open which corresponds to a samba share.
Client use: Openvpn client
I try to make screenchot if you want.

Thanks

alzhao · 2020-11-09T10:53:10.184Z

I never met vpn provider providing a public IP address.

totoy · 2020-11-09T13:16:47.056Z

All the member of this list Membres de la Fédération des fournisseurs d'accès Internet associatifs (FFDN) | Fédération FDN who doing VPN.
They provide a public IP address.

I cannot use your products with them.

Damage…

alzhao · 2020-11-10T04:39:03.389Z

I tried mine and checked. The vpn interface should have a firewall and reject incoming connection.

Can you tell me the firmware version you tried? I can have a further check

alzhao · 2020-11-10T11:24:17.063Z

Can you go to GL.iNet download center and download 3.105 for your model.

This should be fixed.

totoy · 2020-11-10T13:08:07.179Z

Thanks you, for the job, i will make some tests and i make a return.

totoy · 2020-11-10T22:18:33.964Z

Hi, it works on ar750s with the new firmware.

The port forwarding works too !

it’s great!

Happi · 2020-11-11T09:52:38.723Z

alzhao:

The vpn interface should have a firewall and reject incoming connection.

I believe this was pointed out ages ago but ignored.

EDIT: found it (2017!) - Firewall Rules