Can't get Port Forwarding to run using PIA #2060

jcoxpgh78 · 2021-11-09T13:56:22Z

jcoxpgh78
Nov 9, 2021

I downloaded the latest docker image and setup my connection but I can't seem to get port 48595 to open. I've tried the sweden and france connections as well as using UFW_EXTRA_PORTS. not sure what my next steps are. is there something i'm missing to enable ports to be open?

Answered by jcoxpgh78

Nov 11, 2021

PUID=
HOSTNAME=46ead72fe6fa
PWD=/
PEER_DNS_PIN_ROUTES=true

PEER_DNS=true
REVISION=3358a6b25b88fc7b86e384150aaafd1091a0fed5
ENABLE_UFW=false
HOME=/root
LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=0…

View full answer

pkishino · 2021-11-09T15:08:37Z

pkishino
Nov 9, 2021
Collaborator

Pia has its own port update script that will run after transmission is up, this should set the port automatically

0 replies

jcoxpgh78 · 2021-11-09T19:08:37Z

jcoxpgh78
Nov 9, 2021
Author

how do i make sure that script is running?

3 replies

pkishino Nov 9, 2021
Collaborator

Should run automatically once transmission is up.
Can you please post logs showing any problem?
Or just a copy of your current startup logs?

jcoxpgh78 Nov 9, 2021
Author

i'm newish to docker. where do i find that

pkishino Nov 9, 2021
Collaborator

if using cli, type docker logs <name of container>
if using portainer or similar, then check the logs tab

jcoxpgh78 · 2021-11-10T03:44:41Z

jcoxpgh78
Nov 10, 2021
Author

here's the log

Creating TUN device /dev/net/tun
Using OpenVPN provider: PIA
Running with VPN_CONFIG_SOURCE auto
Provider PIA has a bundled setup script. Defaulting to internal config
Executing setup script for PIA
Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.wCBPWIwAI1
Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia
Starting OpenVPN using config france.ovpn
Modifying /etc/openvpn/pia/france.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Setting OpenVPN credentials...
adding route to local network 192.168.0.0/16 via 172.17.0.1 dev eth0
 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021
 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
 TCP/UDP: Preserving recently used remote address: [AF_INET]191.101.31.51:1198
 Socket Buffers: R=[212992->212992] S=[212992->212992]
 UDP link local: (not bound)
 UDP link remote: [AF_INET]191.101.31.51:1198
 TLS: Initial packet from [AF_INET]191.101.31.51:1198, sid=ca4cac6e 04468c43
 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, [email protected]
 VERIFY KU OK
 Validating certificate extended key usage
 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
 VERIFY EKU OK
 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=paris412, name=paris412
 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
 [paris412] Peer Connection Initiated with [AF_INET]191.101.31.51:1198
 SENT CONTROL [paris412]: 'PUSH_REQUEST' (status=1)
 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.11.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.11.112.136 255.255.255.0,peer-id 26,cipher AES-128-GCM'
 OPTIONS IMPORT: timers and/or timeouts modified
 OPTIONS IMPORT: compression parms modified
 OPTIONS IMPORT: --ifconfig/up options modified
 OPTIONS IMPORT: route options modified
 OPTIONS IMPORT: route-related options modified
 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
 OPTIONS IMPORT: peer-id set
 OPTIONS IMPORT: adjusting link_mtu to 1625
 OPTIONS IMPORT: data channel crypto options modified
 Data Channel: using negotiated cipher 'AES-128-GCM'
 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:02
 GDG6: remote_host_ipv6=n/a
 ROUTE6: default_gateway=UNDEF
 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/3
 TUN/TAP device tun0 opened
 TUN/TAP TX queue length set to 100
 /sbin/ip link set dev tun0 up mtu 1500
 /sbin/ip addr add dev tun0 10.11.112.136/24 broadcast 10.11.112.255
 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.11.112.136 255.255.255.0 init
Up script executed with tun0 1500 1553 10.11.112.136 255.255.255.0 init
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.11.112.136
Updating Transmission settings.json with values from env variables
Using existing settings.json for Transmission /data/transmission-home/settings.json
Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.11.112.136
Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed
Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete
Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091
Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch
sed'ing True to true

-------------------------------------
Transmission will run as
-------------------------------------
User name:   root
User uid:    0
User gid:    0
-------------------------------------

STARTING TRANSMISSION
Transmission startup script complete.
 /sbin/ip route add 191.101.31.51/32 via 172.17.0.1
 /sbin/ip route add 0.0.0.0/1 via 10.11.112.1
 /sbin/ip route add 128.0.0.0/1 via 10.11.112.1
 WARNING: OpenVPN was configured to add an IPv6 route over tun0. However, no IPv6 has been configured for this interface, therefore the route installation may fail or may not work as expected.
 Initialization Sequence Completed
 event_wait : Interrupted system call (code=4)
 /etc/openvpn/tunnelDown.sh tun0 1500 1553 10.11.112.136 255.255.255.0 init
resolv.conf was restored
Sending kill signal to transmission-daemon
Successfuly closed transmission-daemon
 /sbin/ip route del 191.101.31.51/32
 /sbin/ip route del 0.0.0.0/1
 /sbin/ip route del 128.0.0.0/1
 Closing TUN/TAP interface
 /sbin/ip addr del dev tun0 10.11.112.136/24
 SIGTERM[hard,] received, process exiting

7 replies

jcoxpgh78 Nov 11, 2021
Author

i reran the container:

Starting container with revision: 3358a6b25b88fc7b86e384150aaafd1091a0fed5
Creating TUN device /dev/net/tun
Using OpenVPN provider: PIA
Running with VPN_CONFIG_SOURCE auto
Provider PIA has a bundled setup script. Defaulting to internal config
Executing setup script for PIA
Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.XWjy5y8puR
Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia
Starting OpenVPN using config france.ovpn
Modifying /etc/openvpn/pia/france.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Setting OpenVPN credentials...
adding route to local network 192.168.0.0/16 via 172.17.0.1 dev eth0
 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021
 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
 TCP/UDP: Preserving recently used remote address: [AF_INET]191.101.31.21:1198
 Socket Buffers: R=[212992->212992] S=[212992->212992]
 UDP link local: (not bound)
 UDP link remote: [AF_INET]191.101.31.21:1198
 TLS: Initial packet from [AF_INET]191.101.31.21:1198, sid=a08a2e19 0fed9bb0
 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, [email protected]
 VERIFY KU OK
 Validating certificate extended key usage
 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
 VERIFY EKU OK
 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=paris411, name=paris411
 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
 [paris411] Peer Connection Initiated with [AF_INET]191.101.31.21:1198
 SENT CONTROL [paris411]: 'PUSH_REQUEST' (status=1)
 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.12.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.12.112.43 255.255.255.0,peer-id 5,cipher AES-128-GCM'
 OPTIONS IMPORT: timers and/or timeouts modified
 OPTIONS IMPORT: compression parms modified
 OPTIONS IMPORT: --ifconfig/up options modified
 OPTIONS IMPORT: route options modified
 OPTIONS IMPORT: route-related options modified
 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
 OPTIONS IMPORT: peer-id set
 OPTIONS IMPORT: adjusting link_mtu to 1625
 OPTIONS IMPORT: data channel crypto options modified
 Data Channel: using negotiated cipher 'AES-128-GCM'
 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:02
 GDG6: remote_host_ipv6=n/a
 ROUTE6: default_gateway=UNDEF
 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/3
 TUN/TAP device tun0 opened
 TUN/TAP TX queue length set to 100
 /sbin/ip link set dev tun0 up mtu 1500
 /sbin/ip addr add dev tun0 10.12.112.43/24 broadcast 10.12.112.255
 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.12.112.43 255.255.255.0 init
Up script executed with tun0 1500 1553 10.12.112.43 255.255.255.0 init
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.12.112.43
Updating Transmission settings.json with values from env variables
Using existing settings.json for Transmission /data/transmission-home/settings.json
Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.12.112.43
Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed
Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete
Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091
Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch
sed'ing True to true

-------------------------------------
Transmission will run as
-------------------------------------
User name:   root
User uid:    0
User gid:    0
-------------------------------------

STARTING TRANSMISSION
Transmission startup script complete.
 /sbin/ip route add 191.101.31.21/32 via 172.17.0.1
 /sbin/ip route add 0.0.0.0/1 via 10.12.112.1
 /sbin/ip route add 128.0.0.0/1 via 10.12.112.1
 WARNING: OpenVPN was configured to add an IPv6 route over tun0. However, no IPv6 has been configured for this interface, therefore the route installation may fail or may not work as expected.
 Initialization Sequence Completed

pkishino Nov 11, 2021
Collaborator

would you happen to have DISABLE_PORT_UPDATER set to true?
if you do, remove the setting or set it to false, otherwise the PIA port update script won't run

jcoxpgh78 Nov 11, 2021
Author

It was set to true. I'll set it to false and run it again

jcoxpgh78 Nov 11, 2021
Author

Starting container with revision: 3358a6b25b88fc7b86e384150aaafd1091a0fed5
Creating TUN device /dev/net/tun
Using OpenVPN provider: PIA
Running with VPN_CONFIG_SOURCE auto
Provider PIA has a bundled setup script. Defaulting to internal config
Executing setup script for PIA
Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.ilwEIGciqB
Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia
Starting OpenVPN using config france.ovpn
Modifying /etc/openvpn/pia/france.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Setting OpenVPN credentials...
adding route to local network 192.168.0.0/16 via 172.17.0.1 dev eth0
 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021
 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
 TCP/UDP: Preserving recently used remote address: [AF_INET]191.101.31.31:1198
 Socket Buffers: R=[212992->212992] S=[212992->212992]
 UDP link local: (not bound)
 UDP link remote: [AF_INET]191.101.31.31:1198
 TLS: Initial packet from [AF_INET]191.101.31.31:1198, sid=2db15310 06f5d998
 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, [email protected]
 VERIFY KU OK
 Validating certificate extended key usage
 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
 VERIFY EKU OK
 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=paris411, name=paris411
 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
 [paris411] Peer Connection Initiated with [AF_INET]191.101.31.31:1198
 SENT CONTROL [paris411]: 'PUSH_REQUEST' (status=1)
 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.22.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.22.112.2 255.255.255.0,peer-id 3,cipher AES-128-GCM'
 OPTIONS IMPORT: timers and/or timeouts modified
 OPTIONS IMPORT: compression parms modified
 OPTIONS IMPORT: --ifconfig/up options modified
 OPTIONS IMPORT: route options modified
 OPTIONS IMPORT: route-related options modified
 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
 OPTIONS IMPORT: peer-id set
 OPTIONS IMPORT: adjusting link_mtu to 1625
 OPTIONS IMPORT: data channel crypto options modified
 Data Channel: using negotiated cipher 'AES-128-GCM'
 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:02
 GDG6: remote_host_ipv6=n/a
 ROUTE6: default_gateway=UNDEF
 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/3
 TUN/TAP device tun0 opened
 TUN/TAP TX queue length set to 100
 /sbin/ip link set dev tun0 up mtu 1500
 /sbin/ip addr add dev tun0 10.22.112.2/24 broadcast 10.22.112.255
 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.22.112.2 255.255.255.0 init
Up script executed with tun0 1500 1553 10.22.112.2 255.255.255.0 init
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.22.112.2
Updating Transmission settings.json with values from env variables
Using existing settings.json for Transmission /data/transmission-home/settings.json
Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.22.112.2
Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed
Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete
Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091
Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch
sed'ing True to true

-------------------------------------
Transmission will run as
-------------------------------------
User name:   root
User uid:    0
User gid:    0
-------------------------------------

STARTING TRANSMISSION
Transmission startup script complete.
 /sbin/ip route add 191.101.31.31/32 via 172.17.0.1
 /sbin/ip route add 0.0.0.0/1 via 10.22.112.1
 /sbin/ip route add 128.0.0.0/1 via 10.22.112.1
 WARNING: OpenVPN was configured to add an IPv6 route over tun0. However, no IPv6 has been configured for this interface, therefore the route installation may fail or may not work as expected.
 Initialization Sequence Completed

pkishino Nov 11, 2021
Collaborator

my bad, checked the script again.. need to remove DISABLE_PORT_UPDATER completely..
I'll make an edit to support both no variable and set to false..

jcoxpgh78 · 2021-11-11T04:01:38Z

jcoxpgh78
Nov 11, 2021
Author

tihs is what i'm using to start my container:

 docker run --cap-add=NET_ADMIN -d \
 -v /media/SDH-12/torrents/:/data \
 -e OPENVPN_PROVIDER=PIA \
 -e OPENVPN_CONFIG=france \
 -e OPENVPN_USERNAME=<username> \
 -e OPENVPN_PASSWORD=<password> \
 -p 9091:9091 \
 haugene/transmission-openvpn

0 replies

jcoxpgh78 · 2021-11-11T04:06:06Z

jcoxpgh78
Nov 11, 2021
Author

newest log:

Starting container with revision: 3358a6b25b88fc7b86e384150aaafd1091a0fed5
Creating TUN device /dev/net/tun
Using OpenVPN provider: PIA
Running with VPN_CONFIG_SOURCE auto
Provider PIA has a bundled setup script. Defaulting to internal config
Executing setup script for PIA
Downloading OpenVPN config bundle openvpn into temporary file /tmp/tmp.ilphbQqpNT
Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia
Starting OpenVPN using config france.ovpn
Modifying /etc/openvpn/pia/france.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Setting OpenVPN credentials...
adding route to local network 192.168.0.0/16 via 172.17.0.1 dev eth0
 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021
 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
 TCP/UDP: Preserving recently used remote address: [AF_INET]156.146.63.142:1198
 Socket Buffers: R=[212992->212992] S=[212992->212992]
 UDP link local: (not bound)
 UDP link remote: [AF_INET]156.146.63.142:1198
 TLS: Initial packet from [AF_INET]156.146.63.142:1198, sid=26543538 8edefcce
 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, [email protected]
 VERIFY KU OK
 Validating certificate extended key usage
 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
 VERIFY EKU OK
 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=paris402, name=paris402
 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
 [paris402] Peer Connection Initiated with [AF_INET]156.146.63.142:1198
 SENT CONTROL [paris402]: 'PUSH_REQUEST' (status=1)
 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.8.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.112.35 255.255.255.0,peer-id 26,cipher AES-128-GCM'
 OPTIONS IMPORT: timers and/or timeouts modified
 OPTIONS IMPORT: compression parms modified
 OPTIONS IMPORT: --ifconfig/up options modified
 OPTIONS IMPORT: route options modified
 OPTIONS IMPORT: route-related options modified
 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
 OPTIONS IMPORT: peer-id set
 OPTIONS IMPORT: adjusting link_mtu to 1625
 OPTIONS IMPORT: data channel crypto options modified
 Data Channel: using negotiated cipher 'AES-128-GCM'
 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:02
 GDG6: remote_host_ipv6=n/a
 ROUTE6: default_gateway=UNDEF
 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/3
 TUN/TAP device tun0 opened
 TUN/TAP TX queue length set to 100
 /sbin/ip link set dev tun0 up mtu 1500
 /sbin/ip addr add dev tun0 10.8.112.35/24 broadcast 10.8.112.255
 /etc/openvpn/tunnelUp.sh tun0 1500 1553 10.8.112.35 255.255.255.0 init
Up script executed with tun0 1500 1553 10.8.112.35 255.255.255.0 init
Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.8.112.35
Updating Transmission settings.json with values from env variables
Using existing settings.json for Transmission /data/transmission-home/settings.json
Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.8.112.35
Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed
Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete
Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091
Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch
sed'ing True to true

-------------------------------------
Transmission will run as
-------------------------------------
User name:   root
User uid:    0
User gid:    0
-------------------------------------

STARTING TRANSMISSION
Transmission startup script complete.
 /sbin/ip route add 156.146.63.142/32 via 172.17.0.1
 /sbin/ip route add 0.0.0.0/1 via 10.8.112.1
 /sbin/ip route add 128.0.0.0/1 via 10.8.112.1
 WARNING: OpenVPN was configured to add an IPv6 route over tun0. However, no IPv6 has been configured for this interface, therefore the route installation may fail or may not work as expected.
 Initialization Sequence Completed

1 reply

pkishino Nov 11, 2021
Collaborator

hmm,something isn't right..
when your container is up, can you run "env" command inside and check if DISABLE_PORT_UPDATER is set or not please?

jcoxpgh78 · 2021-11-11T04:18:24Z

jcoxpgh78
Nov 11, 2021
Author

PUID=
HOSTNAME=46ead72fe6fa
PWD=/
PEER_DNS_PIN_ROUTES=true

PEER_DNS=true
REVISION=3358a6b25b88fc7b86e384150aaafd1091a0fed5
ENABLE_UFW=false
HOME=/root
LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:
WEBPROXY_PASSWORD=
PGID=
LOCAL_NETWORK=192.168.0.0/16
WEBPROXY_USERNAME=
UFW_ALLOW_GW_NET=false
CREATE_TUN_DEVICE=true
DROP_DEFAULT_ROUTE=
LESSCLOSE=/usr/bin/lesspipe %s %s
TERM=xterm
OPENVPN_PROVIDER=PIA
TRANSMISSION_RPC_PORT=9091
LESSOPEN=| /usr/bin/lesspipe %s
UFW_EXTRA_PORTS=48595
DISABLE_PORT_UPDATER=false
SHLVL=1
TRANSMISSION_DOWNLOAD_DIR=/data/completed
UFW_DISABLE_IPTABLES_REJECT=false
LOG_TO_STDOUT=false
OPENVPN_CONFIG=france
WEBPROXY_ENABLED=false
HEALTH_CHECK_HOST=google.com
TRANSMISSION_INCOMPLETE_DIR=/data/incomplete
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
GLOBAL_APPLY_PERMISSIONS=true
SELFHEAL=false
TRANSMISSION_HOME=/data/transmission-home
WEBPROXY_PORT=8118
TRANSMISSION_WATCH_DIR=/data/watch
_=/usr/bin/env

10 replies

jcoxpgh78 Nov 11, 2021
Author

The logs says the following:

transmission auth required
waiting for transmission to become responsive
Unexpected response: <h1>401: Unauthorized</h1>Unauthorized User

Still getting the same message above with the 403

pkishino Nov 11, 2021
Collaborator

might need to add the docker host ip to whitelist
or you can try TRANSMISSION_RPC_WHITELIST_ENABLED=false
try setting to false to make sure it works, then if it does, try to figure out the ip needed for the whitelist to work (just another security feature)

jcoxpgh78 Nov 11, 2021
Author

Did some more testing. If I disable the whitelist everything works. if I enable the whitelist the port forwarding stops working and I can't connect to transmission unless I'm inside of the docker container.

pkishino Nov 11, 2021
Collaborator

in that case you just need to add the right IP to the whitelist (if you want to use it..)
at least we know it works now and it is just a config thing that needs to be fixed

jcoxpgh78 Nov 12, 2021
Author

how do i figure out the ip addresses being used by docker and the openvpn?

pkishino · 2021-11-12T03:17:11Z

pkishino
Nov 12, 2021
Collaborator

Well, easy way is using portainer etc.. But inside the container you can check ifconfig as well add check the container logs. The up is among those.

…

On Fri, Nov 12, 2021 at 12:15 jcoxpgh78 ***@***.***> wrote: how do i figure out the ip addresses being used by docker and the openvpn? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2060 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA7OFYVY2UJEXR3Q7JZD3XTULSBFNANCNFSM5HVLN4QQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

0 replies

Uh oh!

Can't get Port Forwarding to run using PIA #2060

Uh oh!

jcoxpgh78 Nov 9, 2021

Replies: 7 comments · 21 replies

Uh oh!

pkishino Nov 9, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 9, 2021 Author

Uh oh!

pkishino Nov 9, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 9, 2021 Author

Uh oh!

pkishino Nov 9, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 10, 2021 Author

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

Uh oh!

pkishino Nov 11, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

pkishino Nov 11, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

pkishino Nov 11, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

pkishino Nov 11, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 11, 2021 Author

Uh oh!

pkishino Nov 11, 2021 Collaborator

Uh oh!

jcoxpgh78 Nov 12, 2021 Author

Uh oh!

pkishino Nov 12, 2021 Collaborator

jcoxpgh78
Nov 9, 2021

Replies: 7 comments 21 replies

pkishino
Nov 9, 2021
Collaborator

jcoxpgh78
Nov 9, 2021
Author

pkishino Nov 9, 2021
Collaborator

jcoxpgh78 Nov 9, 2021
Author

pkishino Nov 9, 2021
Collaborator

jcoxpgh78
Nov 10, 2021
Author

jcoxpgh78 Nov 11, 2021
Author

pkishino Nov 11, 2021
Collaborator

jcoxpgh78 Nov 11, 2021
Author

jcoxpgh78 Nov 11, 2021
Author

pkishino Nov 11, 2021
Collaborator

jcoxpgh78
Nov 11, 2021
Author

jcoxpgh78
Nov 11, 2021
Author

pkishino Nov 11, 2021
Collaborator

jcoxpgh78
Nov 11, 2021
Author

jcoxpgh78 Nov 11, 2021
Author

pkishino Nov 11, 2021
Collaborator

jcoxpgh78 Nov 11, 2021
Author

pkishino Nov 11, 2021
Collaborator

jcoxpgh78 Nov 12, 2021
Author

pkishino
Nov 12, 2021
Collaborator