https://netmaker.org logo
Upgraded this morning and love the new
# server
d
Upgraded this morning and love the new interface. I am having some issues with external clients, though. For context: I'm using an oracle cloud ARM64 instance as the ingress gateway - it has a static IP. I've also connected my home server and laptop, which cannot ping each other right now. I think I need to set up a relay, but the two hosts are grayed out as options when setting it up so I need to do a bit more investigating. They're both behind a 5G gateway. My (main) issue is with my phone, which I have not been able to connect since 0.17. I've also not had any issues resolving the stun servers. I ran the install script after modifying it to change amd to arm. Thanks for the great project, and thanks in advance for any & all help output of journalctl -fu netclient on ingress gateway while setting up: https://gist.github.com/483240985209348/bf2cf17a7696f426eb3a21a8755f2689 iptables rules: https://gist.github.com/483240985209348/39a303249ce0b8cbc2bb72c94635bee8
j
it looks like your iptables has a default DROP policy, which we found for another user caused the issue. This is especially the case with Docker. Try setting it to accept to see if it starts working.
iptables -I FORWARD -i netmaker -j ACCEPT
@bored-solstice-58967 for visibility
d
Sadly it did not start working
b
is your phone not able to ping ingress gateway as well?
d
Nope
b
is the netclient on the ingress node, running as docker container or on the host?
d
docker. i just ran the install script, nothing fancier than that
j
just to confirm, the ingress is a docker netclient?
d
yes

https://cdn.discordapp.com/attachments/1110016327114039346/1110330069903233104/image.png▾

j
that is your server, but where is the client running? on the same machine?
d
yes, same machine
idk if it's helpful but here is a diagram:

https://cdn.discordapp.com/attachments/1110016327114039346/1110332997745524776/image.png▾

j
hmm ok, I just replicated on my setup, worked fine
192.168.100.0/24 is the netmaker network?
d
Yep
Did external clients work for you?
j
yup
how did you add the config to the client? did you download the config file, or were you able to scan the QR code?
d
I downloaded it
I've also manually entered all the values into the app with the same result
j
can you ping the ingress ip from your phone?
192.168.100.1
nvm i see that is a no
do you have firewall on this box?
what is the ingress port? 51821? if so, confirm that firewall is open for 51821. If ext client cant reach the ingress node that seems likely
d

https://cdn.discordapp.com/attachments/1110016327114039346/1110340465506660352/Screenshot_2023-05-22-18-55-50-38_84d3000e3f4017145260f7618db1d683.jpg▾

Can't ping
Security group does allow traffic from all required ports on the readme
Port is 51821
j
do you have UDP open?
also, just to confirm, 192.168.100.0/24 does not overlap with any local networks?
d
just the default iptables along with the oracle security group. both currently are open for 443, 80, and 51821-51830 (UDP)
nope, local network is 192.168.12.0/24
j
show me "wg show" on the server
oracle cloud is typically problematic because of their built-in iptables policy
d

https://cdn.discordapp.com/attachments/1110016327114039346/1110342327433703526/image.png▾

j
it looks like this machine is unreachable based on that
d
Oracle cloud is just problematic. but it's free and has worked for me in the past
yeah nothing is being received
j
cat /proc/sys/net/ipv4/ip_forward
what does this show
sysctl net.ipv4.ip_forward
d
1

https://cdn.discordapp.com/attachments/1110016327114039346/1110343469693681734/image.png▾

j
sudo ufw status
^ and that
d
inactive
j
idk then, there's definitely some oracle settings that are blocking a connection on that port
d
that's very rude of them. looking at the iptables rules I do have right now I think I'll start deleting the ones from oracle one at a time and see what happens
in the mean time, is there a cloud provider you use/recommend that has a static IP?
thanks for all the help
j
We like digitalocean. If you use our referral code you get some free credits. A droplet is $5/mo
d
Nice. it was only a matter of time before oracle requisitioned my instance anyway haha
j
for $200 credit
d
thanks!
sorry to keep bothering you with this but I have moved over to digitalocean and am having the same issue
hosts cannot ping each other and external host can't ping anything
i am happy to report that the issue wasn't anything to do with netmaker. turns out it was that my domain (through cloudflare) was being proxied. thanks again everyone for the help, and have a great rest of your day
j
Ahhhh that does it…thanks for keeping us updated
2 Views