Whoops, connection failed please try again #197

zyzzma · 2021-06-03T14:01:23Z

Synology DSM6.2
Been running this container for many months. Cannot seem to get it to work now. I've tried CLI and regular synology GUI. neither seem to work and I get the following error on the title. Any help is appreciated

bubuntux · 2021-06-03T14:42:56Z

You need to provide more information, there is a reason why there is a template to create tickets.
if you don't know what is wrong and don't post details and what thing u tried and so fort, no one will be able to help you.

zyzzma · 2021-06-03T14:55:19Z

You're right, I apologize.

-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -s 172.17.0.0/16 -j ACCEPT
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -d 172.17.0.0/16 -j ACCEPT
-A FORWARD -s 172.17.0.0/16 -j ACCEPT
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o tap+ -j ACCEPT
-A OUTPUT -o tun+ -j ACCEPT
-A OUTPUT -o nordlynx+ -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 51820 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 1194 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 1194 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A OUTPUT -d 172.17.0.0/16 -j ACCEPT

nat:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-A POSTROUTING -o tap+ -j MASQUERADE
-A POSTROUTING -o tun+ -j MASQUERADE
-A POSTROUTING -o nordlynx+ -j MASQUERADE

mangle:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT

2021/06/03 14:52:47 [Debug] picking servers for NordLynx technology
2021/06/03 14:52:47 [Warning] route(s) for whitelisted subnet(s) via non-default gateway already exist in the system
2021/06/03 14:52:47 [Error] turning on nordlynx: Creating tun device: no such device
2021/06/03 14:52:47 POST_CONNECT system info:
Routes of All Routing Tables:
default via 172.17.0.1 dev eth0
172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.7
broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
broadcast 172.17.0.0 dev eth0 table local proto kernel scope link src 172.17.0.7
local 172.17.0.7 dev eth0 table local proto kernel scope host src 172.17.0.7
broadcast 172.17.255.255 dev eth0 table local proto kernel scope link src 172.17.0.7
unreachable default dev lo proto kernel metric 4294967295 error -101 pref medium
unreachable default dev lo proto kernel metric 4294967295 error -101 pref medium

IP Rules:
0: from all lookup local
32766: from all lookup main
32767: from all lookup default

IP Tables:
filter:
-P INPUT DROP
-P FORWARD DROP
-P OUTPUT DROP
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -s 172.17.0.0/16 -j ACCEPT
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -d 172.17.0.0/16 -j ACCEPT
-A FORWARD -s 172.17.0.0/16 -j ACCEPT
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o tap+ -j ACCEPT
-A OUTPUT -o tun+ -j ACCEPT
-A OUTPUT -o nordlynx+ -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 51820 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 1194 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 1194 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A OUTPUT -d 172.17.0.0/16 -j ACCEPT

nat:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-A POSTROUTING -o tap+ -j MASQUERADE
-A POSTROUTING -o tun+ -j MASQUERADE
-A POSTROUTING -o nordlynx+ -j MASQUERADE

mangle:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT

[2021-06-03T14:52:47+00:00] Unable to connect.

Done on synology DSM 6.2 using the CLI instructions. putting my NordVPN username and password (not the openvpn ones). I had this working lovely for a long time. I don't know what happened....

bubuntux · 2021-06-03T15:10:07Z

please follow the template instructions, enable DEBUG=trace, the logs provided are not enough,
have u tried updating to the latest version ? have u tried older versions ? try to narrow down the problem.

zyzzma · 2021-06-03T15:22:21Z

I have only tried latest version, not older ones. I added trace like you said. Here is the results:

[2021-06-03T15:19:08+00:00] Firewall is up, everything has to go through the vpn
[2021-06-03T15:19:08+00:00] Enabling connection to secure interfaces
[2021-06-03T15:19:08+00:00] Enabling connection to nordvpn group
iptables: No chain/target/match by that name.
[2021-06-03T15:19:08+00:00] group match failed, fallback to open necessary ports
[2021-06-03T15:19:08+00:00] ip6 group match failed, fallback to open necessary ports
[2021-06-03T15:19:08+00:00] Enabling connection to docker network
[2021-06-03T15:19:09+00:00] Restarting the service
[2021-06-03T15:19:09+00:00] Waiting for the service to start
[2021-06-03T15:19:10+00:00] Logging in

|
/

\

Welcome to NordVPN! You can now connect to VPN by using 'nordvpn connect'.
[2021-06-03T15:19:16+00:00] Setting up NordVPN Version 3.9.5
Technology is successfully set to 'NordLynx'.
Subnet 172.17.0.0/16 is whitelisted successfully.