D
D
Dymok2018-05-16 02:42:25
linux
Dymok, 2018-05-16 02:42:25

Why can't I open a port for OpenVPN?

Recently, after trying to install VestaCP and its crooked removal (many packages left that were installed with it), OpenVPN stopped working (on port 1194). The port scanner shows that port 1194 is "filtered". I've tried so many things, I don't know what else to do. Help, pls.

Here are the AWS firewall rules (the virtual machine is hosted there):
5afb6f418ed6f266492951.jpeg
Here is the output of ufw status
To                         Action      From
--                         ------      ----
Postfix                    ALLOW       Anywhere
1194/udp                   ALLOW       Anywhere
OpenSSH                    ALLOW       Anywhere
22                         ALLOW       Anywhere
443                        ALLOW       Anywhere
8083                       ALLOW       Anywhere
80                         ALLOW       Anywhere
Postfix (v6)               ALLOW       Anywhere (v6)
1194/udp (v6)              ALLOW       Anywhere (v6)
OpenSSH (v6)               ALLOW       Anywhere (v6)
22 (v6)                    ALLOW       Anywhere (v6)
80 (v6)                    ALLOW       Anywhere (v6)
443 (v6)                   ALLOW       Anywhere (v6)
1194/tcp (v6)              ALLOW       Anywhere (v6)
Here is the output of netstat -ntulp

Здесь почему-то напротив порта 1194 нет строки LISTEN, может дело в этом? Если да, то почему и как исправить?
tcp        0      0 127.0.0.1:12301         0.0.0.0:*               LISTEN      1555/opendkim
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      1441/dovecot
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      1441/dovecot
tcp        0      0 0.0.0.0:465             0.0.0.0:*               LISTEN      1954/exim4
tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN      1512/vsftpd
tcp        0      0 172.31.41.165:53        0.0.0.0:*               LISTEN      1418/named
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      1418/named
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      1954/exim4
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      1418/named
tcp        0      0 0.0.0.0:2525            0.0.0.0:*               LISTEN      1954/exim4
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN      1441/dovecot
tcp        0      0 0.0.0.0:10050           0.0.0.0:*               LISTEN      1440/zabbix_agentd
tcp        0      0 0.0.0.0:995             0.0.0.0:*               LISTEN      1441/dovecot
tcp        0      0 0.0.0.0:587             0.0.0.0:*               LISTEN      1954/exim4
tcp6       0      0 :::110                  :::*                    LISTEN      1441/dovecot
tcp6       0      0 :::143                  :::*                    LISTEN      1441/dovecot
tcp6       0      0 :::80                   :::*                    LISTEN      1660/apache2
tcp6       0      0 :::53                   :::*                    LISTEN      1418/named
tcp6       0      0 :::3128                 :::*                    LISTEN      743/(squid-1)
tcp6       0      0 ::1:953                 :::*                    LISTEN      1418/named
tcp6       0      0 :::443                  :::*                    LISTEN      1660/apache2
tcp6       0      0 :::2236                 :::*                    LISTEN      1446/sshd
tcp6       0      0 :::993                  :::*                    LISTEN      1441/dovecot
tcp6       0      0 :::10050                :::*                    LISTEN      1440/zabbix_agentd
tcp6       0      0 :::995                  :::*                    LISTEN      1441/dovecot
tcp6       0      0 :::3306                 :::*                    LISTEN      1518/mysqld
udp        0      0 0.0.0.0:37120           0.0.0.0:*                           743/(squid-1)
udp        0      0 10.8.0.1:53             0.0.0.0:*                           1418/named
udp        0      0 172.31.41.165:53        0.0.0.0:*                           1418/named
udp        0      0 127.0.0.1:53            0.0.0.0:*                           1418/named
udp        0      0 0.0.0.0:68              0.0.0.0:*                           1144/dhclient
udp        0      0 0.0.0.0:1194            0.0.0.0:*                           1492/openvpn
udp6       0      0 :::55121                :::*                                743/(squid-1)
udp6       0      0 :::53                   :::*                                1418/named

iptables -L output: https://pastebin.com/ApMia7fB
Thanks in advance for your replies.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
P
planc, 2018-05-16
@UnluckySerivelha

iptables -I INPUT 1 -p udp -m udp --dport 1194 -j ACCEPT

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question