Hello Neourouter friends

I recently discovered this wonderful tool and I became fan instantly, I have a Neorouter server working on CentOS without any problem.

The problem appeared when I tried to install the service in a FreeBSD environment, here's my configuration.


NeoRouter server settings:
Domain Name: xxxVPN
Server Port: 80
DHCP Subnet: 192.168.1.50
DHCP Netmask: 255.255.255.0

Server ip 192.168.1.4

PF firewall on

pf.conf
ext_if="em0"
pass in on $ext_if proto tcp from any to 192.168.1.104 port 80 flags S/SA synproxy state

Checking Port

Please enter the IP address and port of the NeoRouter Server:
IP Address:
Port:

The address "192.168.1.104:80" is closed and the NeoRouter Server cannot be used at this time

I really don’t understand what’s not working, I have a similar config in Centos working like a charm. Help would be appreciated.


Daniel Marques

Hi dblue_one,

When you use the "Checking Port", you may want to use the public IP address of your server and assume you have setup the port forwarding in your router properly to open the listen port of NR to the Internet. Since you provide a private IP, the test page won't connect to it fore sure.

Let us know if you have any other question.

Thanks,
KevinZ - NeoRouter team

Hello KevinZ,

Off course!!! you are right!! the checking port service is made from outside of my network, dumb off me!!! Yes i have the port fowarding pointing to the neorouter server and the check port was sucessfull whit the external ip, but still no success login to the neorouter service whit the client. Dont understand why!!!

Hi dblue_one,

It's better to separate the issue. You may want to install a NR client on the same box as the server and run nrclientcmd to connect to the 127.0.0.1 (instead of domain name), see if it work. You can also use telnet to connect to the server's listen port. If it works, it could be firewall issue or port forwarding issue.

Then try connect to the nrserver from another machine in the same LAN. Try to log on using private IP instead of domain name. This can help you figure out if it's a firewall issue on the box or router's issue.

Let us know if still have problem.

Thanks,
KevinZ - NeoRouter team

Thank you for your time kevinz.

I’m one step ahead, I already try it everything you told me too (except the client in the same box) the results are:

The telnet to the listening port of the Neorouter works fine.
I can’t connect via windows client or the network configurator to the neorouter server whit the internal ip.

As I told you before, I have a neorouter server working fine in a CentOS environment, and can connect both whit internal ip and external ip/domain, so this is not a router/port configuration issue, I believe the problem is from the FreeBSD PF firewall or Neourouter configuration specific to FreeBSD.

Hi dblue_one,

Good progress.

Would you stop the firewall temporarily and telnet to it from another computer?

/etc/rc.d/ipfw stop

Also you can run "netstat -ln" to check what is the IP address the NR server listener bound to.

Thanks,
KevinZ - NeoRouter team

Hi KevinZ,

netstat -ln only shows the ssh port listening. I'm missing something!!

Hi dblue_one,

Would you mind post the results of netstat -ln and ifconfig or send it to support at neorouter.com?

Also double check if the nrserver process started.

Thanks,
KevinZ - NeoRouter team

yes the process is started!
I really lost a lot of time whit this issue, im going to use Neorouter whit the Centos enviroment, works great there.
When my DBA work releases me a litlle i come back to the freebsd war
For now, init 3 on Centos and let it fly!!!


Thank you Kevin

just a fyi, a PR has been added to FreeBSD ports to add Neorouter client/server as separate ports for FreeBSD 8.x

For those using this, I would appreciate some feedback.

You can see pr status
<http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/160017>