Jump to content
Not connected, Your IP: 216.73.217.99
schwede

how to set a fixed local port for OpenVPN and WireGuard?

Recommended Posts

Hello,

I run Eddie 2.27.2 on Windows Server 2019. My network has a firewall/filter that treats unknown UDP traffic very strictly,
hich slows VPN tunnels down a lot (WireGuard only reached about 300 Kbps, OpenVPN about 70 Mbps, while the connection without VPN runs at about 1 Gbps).
A filter for WireGuard and OpenVPN can be set up, but it only works for a fixed LOCAL UDP port on my machine (WireGuard 51820, OpenVPN 1194), not for the remote ports of the VPN servers.

So I need Eddie to use a fixed local port, but I did not find a way:

OpenVPN:
- In Settings > OpenVPN directives I set "Use only Custom directives" and added "lport 1194" (without the "nobind" line). Connecting fails with: "OpenVPN > Options error: --lport and --nobind don't make sense when used together".
- When I additionally add "bind", it fails with: "--bind and --nobind can't be used together".
- So it seems Eddie adds "nobind" to the generated config by itself, even when the base directives are not used.
- Running openvpn.exe manually with a config from the Config Generator (with lport 1194 and without nobind) works fine, so this is not a problem of the servers.

WireGuard:
- I did not find settings. Just MTU.

Questions:
1. Is "nobind" hard-coded in Eddie, and is there a supported way to use a fixed local port for OpenVPN?
2. Is there a way to set the WireGuard local port (ListenPort) in Eddie?
3. If not, could this be added as an option in a future version? It would help everyone behind networks with UDP filtering or strict firewall rules.

Thank you and best regards

Share this post


Link to post
Posted ... (edited)

Eddie silently ignores all changes to the base directives if in Append mode, and uses Base + Custom in Custom mode, so remove nobind from there and add your custom directives on the left, then set it to Custom mode.

Little tip: To check the OpenVPN config Eddie would use to connect to a server, in the Servers/Countries tab right click on an entry and select More.

Edited ... by Tech Jedi Alex
Corrections

NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT.

LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too!

Want to contact me directly? All relevant methods are on my About me page.

Share this post


Link to post

Thank you for the tip, I tried it, but unfortunately it does not solve it.

I removed nobind from the Base directives and put "lport 1194" into the Custom directives.
I tried both modes ("Append Custom directives" and "Use only Custom directives").
In both cases the config shown under Servers > right click > More still contains "nobind", without any level comment, right after sndbuf/rcvbuf:

sndbuf 262144
rcvbuf 262144
nobind
lport 1194 # Custom level
remote-cert-tls server # Provider level

When connecting OpenVPN then stops with: "Options error: --lport and --nobind don't make sense when used together".
f I also add "bind" to the custom directives, it stops with: "--bind and --nobind can't be used together".
So the "nobind" line is added by Eddie itself, not by the base directives.

For comparison: if I start openvpn.exe manually with a config from the Config Generator (with lport 1194 and without nobind), the connection works.

For WireGuard, the config under More has no ListenPort, and I found no setting for it in Settings > WireGuard (only the MTU).

My questions:
1. Where does the "nobind" line come from in Eddie 2.27.2 (Windows), and is there a supported way to disable it so a fixed local port can be used?
2. Is there a way to set the WireGuard ListenPort in Eddie?
3. If not could an option for a fixed local UDP port (OpenVPN and WireGuard) be added in a future version? It would help in networks where a firewall or filter only works with a fixed local port.

Thank you!

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...