VPN Issue on FritzBox

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › VPN Issue on FritzBox

1 | 2

gocheck

34 posts

Geek
+1 received by user: 4

#2408119 28-Jan-2020 12:58

Updates:

I bought a Raspberry Pi 4 and run pivpn on it. The pivpn works really well but the problem is my family members in China cannot get the app installed on their phones. It's lucky the Android phones can still get the Wireguard apk downloaded and installed. But Wireguard APP has been removed from Apple app store in China. Even they've changed to an Apple ID registered in NZ still cannot get it. What a frustration.

Jiriteach

1139 posts

Uber Geek
+1 received by user: 373

ID Verified

Trusted

Lifetime subscriber

#2408121 28-Jan-2020 13:03

gocheck:

Jiriteach: What’s their gateway IP after connecting to the VPN? Get them to Google what’s my IP once they are connected and it should be your static IP.

This is only going to be the case if the setting of send all traffic via VPN is enabled, else the client config is not correct.

DNS servers should be auto pushed with the config but else if Google’s are banned, try Cloudflares - 1.1.1.1 and 1.0.0.1.

Sounds to me like not all traffic is being routed via the VPN. Easy check though.

Their gateway IP was my static IP. I could see they had connected on the Fritzbox event log

Thats good so shows that they are routing via your VPN and traffic is flowing securely via the tunnel through your connection. What they can access then should be exactly the same as to what your connection allows.

-- opinions expressed by me are solely my own. ie - personal

gocheck

34 posts

Geek
+1 received by user: 4

#2408122 28-Jan-2020 13:04

freitasm:

Interesting. I'd have thought the gateway would've been the router's internal IP, not the external static IP.

They don't have any technical background (same as me). I asked them to connect to the VPN and visit any IP check websites to find out their IP. What they told me was exactly my static IP.

gocheck

34 posts

Geek
+1 received by user: 4

#2408127 28-Jan-2020 13:06

Jiriteach:

gocheck:

Jiriteach: What’s their gateway IP after connecting to the VPN? Get them to Google what’s my IP once they are connected and it should be your static IP.

This is only going to be the case if the setting of send all traffic via VPN is enabled, else the client config is not correct.

DNS servers should be auto pushed with the config but else if Google’s are banned, try Cloudflares - 1.1.1.1 and 1.0.0.1.

Sounds to me like not all traffic is being routed via the VPN. Easy check though.

Their gateway IP was my static IP. I could see they had connected on the Fritzbox event log

Thats good so shows that they are routing via your VPN and traffic is flowing securely via the tunnel through your connection. What they can access then should be exactly the same as to what your connection allows.

I did not put any restrictions on the VPN connection. It's even not allowed in the Fritzbox VPN setting.

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41040

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2408129 28-Jan-2020 13:07

gocheck:

freitasm:

Interesting. I'd have thought the gateway would've been the router's internal IP, not the external static IP.

They don't have any technical background (same as me). I asked them to connect to the VPN and visit any IP check websites to find out their IP. What they told me was exactly my static IP.

Ok, so they can reach the IP check website and shows your VPN. This means they are going through your connection.

What's the problem now? Aren't they able to browse the Internet normally - if they can get to an IP check website it seem it's working.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

gocheck

34 posts

Geek
+1 received by user: 4

#2408132 28-Jan-2020 13:12

freitasm:

gocheck:

freitasm:

Interesting. I'd have thought the gateway would've been the router's internal IP, not the external static IP.

They don't have any technical background (same as me). I asked them to connect to the VPN and visit any IP check websites to find out their IP. What they told me was exactly my static IP.

Ok, so they can reach the IP check website and shows your VPN. This means they are going through your connection.

What's the problem now? Aren't they able to browse the Internet normally - if they can get to an IP check website it seem it's working.

The problem is even they have connected to my VPN in NZ, they can only browse the websites not being banned by the Chinese Government. They cannot access websites like Google, Youtube etc banned in China. But it was OK for years until last week. I mean by the VPN set up through the VPN setting on the Fritzbox. There's no issue by using pivpn on a Raspberry Pi.

AliExpress

Shop now on AliExpress (affiliate link).

Jiriteach

1139 posts

Uber Geek
+1 received by user: 373

ID Verified

Trusted

Lifetime subscriber

#2408137 28-Jan-2020 13:22

gocheck:

The problem is even they have connected to my VPN in NZ, they can only browse the websites not being banned by the Chinese Government. They cannot access websites like Google, Youtube etc banned in China. But it was OK for years until last week. I mean by the VPN set up through the VPN setting on the Fritzbox. There's no issue by using pivpn on a Raspberry Pi.

Ok - this is very strange. So they can connect to your VPN and their gateway IP if your static IP (as provided by 2degrees).

Other items to check -

-- What DNS servers are they using? Make sure nothing explicit is set as it should auto pick-up.

-- Connect to your VPN from outside your network (like on 4g etc) and see if those sites work. If they do - its something on their end?

-- Run a tracert to see how traffic is being routed to google.com for example.

-- opinions expressed by me are solely my own. ie - personal

oldhack

23 posts

Geek
+1 received by user: 7

#2409936 29-Jan-2020 22:28

Are they using mobile phones ? Possibly the mobile network DNS is dominant. Flight mode, enable WiFi. Test again.

1 | 2