Port Forward while using VPN Client

[Mikeyy]

I have a question connected to this. Script I posted here generally works. Problem is, I bought new router (AC68P) and it's working when I access devices from outside, but it isn't working when I try to access same devices from within the network (wifi or lan, doesn't matter).

Basically I have ddns setup which points to https://name.domain.com:5001/, if I try to access it from mobile network, it works, but if I connect same mobile phone to my home wifi, it doesn't work.

I'm sure it worked before, not sure why it isn't working now. Any way to troubleshot it?

EDIT: This is what I see in System Log -> Connections:

Proto NATed Address                            Destination Address                      State
tcp   192.168.1.x:51192                      192.168.1.y:5001                         SYN_SENT  
tcp   192.168.1.x:51190                      192.168.1.y:5001                         SYN_SENT  
tcp   192.168.1.x:51191                      192.168.1.y:5001                         SYN_SENT  
tcp   192.168.1.x:51193                      192.168.1.y:5001                         SYN_SENT

 

[Mikeyy]

I'm sure it worked before, not sure why it isn't working now. Any way to troubleshot it?

When noone will, I'm answering my own question.
After whole day of trial and error I found out that this line "iptables -t mangle -F PREROUTING" deletes needed rule so I just commented it out and now world is a good place once again.

 

[Wasim Soultan]

Hi, i recently discovered a problem with my ASUS DSL-AC68U router, the router shows the wrong wan ip. it continues showing my ISP ip even wile using vpn router configuration and i can no longer remote access my device using airvpn port forwarding. any help fixing this will be appreciated... Thanks

 

[Yah]

Is that possible to summarize this thread and provide step by step solution?

 

[Mikeyy]

Is that possible to summarize this thread and provide step by step solution?

Creating user scripts is described here. You need "openvpn-event" script.
Script is provided earlier in this thread.

Commenting out line means you add # on line start, before any text.

 

[Yah]

I tried the script provided here and my understanding it is routing all clients thru VPN with exception of some client ports at the bottom of the script.I tried with both mentioned line commended and uncommented and didn't notice any difference. Is that possible to route just some client ports via VPN?

 

[Mikeyy]

That script only allows certain ports to not use vpn. If you want client or clients to use vpn you must setup routing policy in router web gui.

 

[killeriq]

How to add multiple ports?
5555,5556 doesnt work any other way instead of adding multiple lines?

thanks