Unable to access

Troubleshooting
1

Required Information

G_DIETPI_VERSION_CORE=8
G_DIETPI_VERSION_SUB=16
G_DIETPI_VERSION_RC=2
G_GITBRANCH=‘master’
G_GITOWNER=‘MichaIng’
G_LIVE_PATCH_STATUS[0]=‘not applicable’

  • Distro version | bullseye 0
  • Kernel version | Linux DietPi 6.1.21-v8+ #1642 SMP PREEMPT Mon Apr 3 17:24:16 BST 2023 aarch64 GNU/Linux
  • Architecture | armhf
  • SBC model | RPi4

Hi there, I need help with an issue.

I can reach my rpi when connected to my local WiFi. When I wanted to have access from the outside I used a VPN connection. Everything used to work until three or four months ago.

Nowadays,

  1. If I use my mobile connection with the VPN I am able to reach other local servers but I can’t reach the RPi. (It used to work but not anymore)

  2. I’ve tried remote.it The device is up but I can’t connect to it. (If I use a ssh connection it is rejected (connection error 1005 -ssh juice- or connection reset -cmd-).

image
image1234×401 13 KB

Any help would be appreciated. Thanks in advance.

2

what kind of VPN server you are running? Where is the VPN server running? Did you install anything on your RPi? Like a VPN client or any security software?

3

Thank you for your answer.

The VPN server is not run by my RPI (I don’t where it is I didn’t set it up, an IT administrator did so). I use OpenVpn on my mobile phone to connect to it.

Did you install anything on your RPi?
No, that I’m aware of.

4

That doesn’t make it any easier.

Can you check running interfaces. Maybe we can see if OpenVPN is running on your RPi directly.

ip a
5 
root@DietPi:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group defaul                                                                                                                                                             t qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group defa                                                                                                                                                             ult qlen 1000
    link/ether XXXXX
    inet XXXXXXXX brd XXXXXXXX scope global dynamic eth0
       valid_lft 41688sec preferred_lft 41688sec
    inet6 XXXXXXXXX scope link
       valid_lft forever preferred_lft forever
3: br-353dfaeb6856: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue sta                                                                                                                                                             te UP group default
    link/ether XXXXXXXX
    inet XXXXXXXX scope global br-353dfaeb6856
       valid_lft forever preferred_lft forever
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
4: br-64b8bd1bb8b5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue sta                                                                                                                                                             te UP group default
    link/ether XXXXXXXX
    inet XXXXXXXX scope global br-64b8bd1bb8b5
       valid_lft forever preferred_lft forever
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP gr                                                                                                                                                             oup default
    link/ether XXXXXXXX
    inet XXXXXXXX scope global docker0
       valid_lft forever preferred_lft forever
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
63: veth10f2475@if62: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue m                                                                                                                                                             aster docker0 state UP group default
    link/ether XXXXXXXXlink-netnsid 0
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
65: veth80d9a1b@if64: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue m                                                                                                                                                             aster br-353dfaeb6856 state UP group default
    link/ether XXXXXXXX link-netnsid 5
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
67: veth13f069c@if66: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue m                                                                                                                                                             aster br-64b8bd1bb8b5 state UP group default
    link/ether be:a1:XXXXXXXX link-netnsid 4
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
69: veth2b88baa@if68: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue m                                                                                                                                                             aster docker0 state UP group default
    link/ether XXXXXXXX link-netnsid 1
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
71: veth900e6a8@if70: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue m                                                                                                                                                             aster docker0 state UP group default
    link/ether de:XXXXXXXX link-netnsid 2
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
73: vethdaeae4e@if72: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue m                                                                                                                                                             aster docker0 state UP group default
    link/ether XXXXXXXXlink-netnsid 3
    inet6 XXXXXXXX scope link
       valid_lft forever preferred_lft forever
6

quite some docker container. Out of interesset, can you share what Docker container you have running

docker container ls

Maybe OpenVPN is running side one of these container.

7 
root@DietPi:~# docker container ls
CONTAINER ID   IMAGE                            COMMAND                  CREATED        STATUS                  PORTS                                                                                                                                                                                            NAMES
0609bc0972cb   jaymoulin/jdownloader:latest     "/opt/JDownloader/da…"   3 days ago     Up 25 hours             0.0.0.0:3129->3129/tcp, :::3129->3129/tcp                                                                                                                                                        jdownloader
6b3c59346228   linuxserver/calibre-web:latest   "/init"                  3 weeks ago    Up 25 hours             0.0.0.0:8083->8083/tcp, :::8083->8083/tcp                                                                                                                                                        Calibre
00e77aa8c1b7   ngosang/amule                    "/home/amule/entrypo…"   5 weeks ago    Up 25 hours             0.0.0.0:4665->4665/udp, :::4665->4665/udp, 0.0.0.0:4662->4662/tcp, :::4662->4662/tcp, 0.0.0.0:4711-4712->4711-4712/tcp, :::4711-4712->4711-4712/tcp, 0.0.0.0:4672->4672/udp, :::4672->4672/udp   amule2
836d4bf53ec1   organizr/organizr:latest         "/init"                  6 weeks ago    Up 25 hours (healthy)   0.0.0.0:80->80/tcp, :::80->80/tcp, 443/tcp                                                                                                                                                       organizr
c99dbf176048   portainer/portainer-ce           "/portainer"             8 weeks ago    Up 25 hours             8000/tcp, 9443/tcp, 0.0.0.0:9002->9000/tcp, :::9002->9000/tcp                                                                                                                                    portainer
9593390ebee5   pihole/pihole:latest             "/s6-init"               4 months ago   Up 25 hours (healthy)   0.0.0.0:53->53/udp, :::53->53/udp, 0.0.0.0:53->53/tcp, 0.0.0.0:67->67/udp, :::53->53/tcp, :::67->67/udp, 0.0.0.0:9080->80/tcp, :::9080->80/tcp
8

ok the VPN server is not running inside one of the Docker container. Quite hard to troubleshoot without knowing where your VPN server is located.

9

Thank you for your answer.

Any clue why can’t I connect via remote.it?

Thanks

10

I don’t have experience with remote.it. But you see the server connected on remote.it web site?

11

Yes, I see the pi connected (online-green) but when I try to SSH the connection is rejected by the RPi.