10
9
Fork
You've already forked linux-app
14

Allow LAN traffic stopped working #635

Closed
opened 2025年04月23日 02:23:23 +02:00 by shard · 19 comments

Yesterday I was able to connect to the VPN and still work with local network devices as I've enabled the "Allow LAN traffic" option. There was an update to eduVPN and now it doesn't allow local traffic anymore. I can't even ping my router unless I disconnect from the VPN.

Installation

curl https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc | gpg --import -
pamac build python-eduvpn-client

Version

eduVPN GUI version: 4.5.0 with eduvpn-common version: 3.0.0

Check if your issue is in the known issues list

Nothing about allowing local lan traffic in known issue list

OS/Distribution

Arch

❯ uname -a
Linux orion 6.14.3-zen1-1-zen #1 ZEN SMP PREEMPT_DYNAMIC 2025年4月20日 12:38:36 +0000 x86_64 GNU/Linux
❯ lsb_release -a
LSB Version: n/a
Distributor ID: Garuda
Description: Garuda Linux Broadwing
Release: Soaring
Codename: Broadwing

Logs

log 
❯ eduvpn-gui -d
2025年04月23日 12:09:02,239 - MainThread - DEBUG - eduvpn.ui.app - app.py:69 - activate
2025年04月23日 12:09:02,284 - <function ApplicationModelTransitions.get_previous_servers at 0x7969cd361120> - DEBUG - eduvpn.app - app.py:48 - Transition: MAIN, old state: 1
2025年04月23日 12:09:03 - Go - DEBUG - got 304 for discovery, server_list.json not modified
2025年04月23日 12:09:03,584 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1075 - server list refresh
2025年04月23日 12:09:06,153 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1161 - on server row pressed
2025年04月23日 12:09:06,237 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1120 - activated server: <eduvpn.server.InstituteServer object at 0x7969cd32aad0>
2025年04月23日 12:09:06,238 - <function ApplicationModelTransitions.getting_config at 0x7969cd361580> - DEBUG - eduvpn.app - app.py:63 - Transition: GETTING_CONFIG, old state: 1
2025年04月23日 12:09:06 - Go - DEBUG - saving state file
2025年04月23日 12:09:06,517 - <function ApplicationModelTransitions.parse_config at 0x7969cd3620c0> - DEBUG - eduvpn.app - app.py:103 - Transition: GOT_CONFIG, old state: 4
2025年04月23日 12:09:06,517 - <function ApplicationModelTransitions.parse_connecting at 0x7969cd3625c0> - DEBUG - eduvpn.app - app.py:128 - Transition: CONNECTING, old state: 7
2025年04月23日 12:09:06,518 - MainThread - DEBUG - eduvpn.nm - nm.py:457 - writing wireguard configuration to Network Manager
2025年04月23日 12:09:06,520 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1234 - clicked on switch connection state
2025年04月23日 12:09:06,521 - MainThread - DEBUG - eduvpn.nm - nm.py:376 - Adding new connection
2025年04月23日 12:09:06,532 - MainThread - DEBUG - eduvpn.nm - nm.py:976 - Connection added for uuid: 92cb2312-bacd-4988-b062-910be48deb4d
2025年04月23日 12:09:06,532 - MainThread - DEBUG - eduvpn.nm - nm.py:688 - activate_connection: <NM.RemoteConnection object at 0x7969cd3cb440 (NMRemoteConnection at 0x638d5212cad0)>
2025年04月23日 12:09:06,543 - MainThread - DEBUG - eduvpn.nm - nm.py:712 - activate_connection_async result: <NM.ActiveConnection object at 0x796958314e40 (NMActiveConnection at 0x638d52582400)>
2025年04月23日 12:09:06 - Go - DEBUG - attempt an invalid self-transition: Connecting
2025年04月23日 12:09:06,637 - MainThread - DEBUG - eduvpn.app - app.py:201 - Failover should not continue
2025年04月23日 12:09:06,638 - <function ApplicationModelTransitions.parse_connected at 0x7969cd362520> - DEBUG - eduvpn.app - app.py:121 - Transition: CONNECTED, old state: 8
2025年04月23日 12:09:06,641 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1034 - start validity countdown
2025年04月23日 12:09:06,642 - MainThread - DEBUG - eduvpn.app - app.py:201 - Failover should not continue
2025年04月23日 12:09:14,924 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1082 - clicked settings button
2025年04月23日 12:09:19,409 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1094 - clicked on go back
2025年04月23日 12:09:27,587 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1082 - clicked settings button
2025年04月23日 12:09:28,560 - MainThread - DEBUG - eduvpn.config - config.py:54 - saving settings: {'ignore_keyring_warning': True, 'allow_wg_lan': True, 'proxy_active_warning': None}
2025年04月23日 12:09:31,835 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1094 - clicked on go back
2025年04月23日 12:09:32,750 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1234 - clicked on switch connection state
2025年04月23日 12:09:32,751 - <function ApplicationModelTransitions.disconnecting at 0x7969cd361940> - DEBUG - eduvpn.app - app.py:73 - Transition: DISCONNECTING, old state: 9
2025年04月23日 12:09:32,751 - MainThread - DEBUG - eduvpn.nm - nm.py:876 - disconnect uuid: <module 'uuid' from '/usr/lib/python3.13/uuid.py'>
2025年04月23日 12:09:32,752 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:992 - leave connected state
2025年04月23日 12:09:32,752 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1042 - stop validity countdown
2025年04月23日 12:09:32,752 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1056 - stop validity threads
2025年04月23日 12:09:32,760 - MainThread - DEBUG - eduvpn.nm - nm.py:865 - disconnect_async result: True
2025年04月23日 12:09:32,774 - MainThread - DEBUG - eduvpn.nm - nm.py:828 - delete_async result: True
2025年04月23日 12:09:32,775 - cleanup - DEBUG - eduvpn.app - app.py:514 - Cleaning up tokens...
2025年04月23日 12:09:32 - Go - DEBUG - saving state file
2025年04月23日 12:09:32,897 - <function ApplicationModelTransitions.disconnected_server at 0x7969cd361760> - DEBUG - eduvpn.app - app.py:68 - Transition: DISCONNECTED, old state: 10
2025年04月23日 12:10:48,721 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1446 - clicked on close window
2025年04月23日 12:10:48,721 - MainThread - DEBUG - eduvpn.ui.app - app.py:106 - window closed
2025年04月23日 12:10:48,722 - MainThread - DEBUG - eduvpn.ui.app - app.py:96 - quit
2025年04月23日 12:10:48 - Go - DEBUG - saving state file
2025年04月23日 12:10:48,726 - <function ApplicationModelTransitions.deregistered at 0x7969cd3611c0> - DEBUG - eduvpn.app - app.py:53 - Transition: DEREGISTERED, old state: 11
2025年04月23日 12:10:48,727 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:397 - deregistered transition

Do you have a problem during or after connecting?

NetworkManager 

❯ sudo journalctl -fu NetworkManager
Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7599] device (eduVPN): state change: activated -> deactivating (reason 'user-requested', managed-type: 'full')
Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7606] audit: op="device-disconnect" interface="eduVPN" ifindex=12 pid=513059 uid=1000 result="success"
Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7746] audit: op="connection-delete" uuid="92cb2312-bacd-4988-b062-910be48deb4d" name="eduVPN" pid=513059 uid=1000 result="success"
Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7816] device (eduVPN): state change: deactivating -> disconnected (reason 'user-requested', managed-type: 'full')
Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.9433] device (eduVPN): state change: disconnected -> unmanaged (reason 'user-requested', managed-type: 'full')
Apr 23 12:09:57 orion NetworkManager[1237]: <info> [1745366997.1096] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240
Apr 23 12:10:53 orion NetworkManager[1237]: <info> [1745367053.1081] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240
Apr 23 12:11:49 orion NetworkManager[1237]: <info> [1745367109.1093] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240
Apr 23 12:12:44 orion NetworkManager[1237]: <info> [1745367164.1096] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240
Apr 23 12:13:40 orion NetworkManager[1237]: <info> [1745367220.1106] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1363] manager: (eduVPN): new WireGuard device (/org/freedesktop/NetworkManager/Devices/14)
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1365] audit: op="connection-add" uuid="c832ea19-ce51-4351-bccc-b553c88db663" name="eduVPN" pid=545661 uid=1000 result="success"
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1481] device (eduVPN): state change: unmanaged -> unavailable (reason 'managed', managed-type: 'external')
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1489] device (eduVPN): state change: unavailable -> disconnected (reason 'user-requested', managed-type: 'full')
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1492] device (eduVPN): Activation: starting connection 'eduVPN' (c832ea19-ce51-4351-bccc-b553c88db663)
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1492] audit: op="connection-activate" uuid="c832ea19-ce51-4351-bccc-b553c88db663" name="eduVPN" pid=545661 uid=1000 result="success"
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1494] device (eduVPN): state change: disconnected -> prepare (reason 'none', managed-type: 'full')
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1496] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full')
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1499] device (eduVPN): state change: config -> need-auth (reason 'none', managed-type: 'full')
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1505] device (eduVPN): state change: need-auth -> prepare (reason 'none', managed-type: 'full')
Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1506] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full')
Apr 23 12:14:08 orion NetworkManager[1237]: <info> [1745367248.9849] device (eduVPN): state change: config -> ip-config (reason 'none', managed-type: 'full')
Apr 23 12:14:08 orion NetworkManager[1237]: <info> [1745367248.9901] device (eduVPN): state change: ip-config -> ip-check (reason 'none', managed-type: 'full')
Apr 23 12:14:09 orion NetworkManager[1237]: <info> [1745367249.0293] device (eduVPN): state change: ip-check -> secondaries (reason 'none', managed-type: 'full')
Apr 23 12:14:09 orion NetworkManager[1237]: <info> [1745367249.0294] device (eduVPN): state change: secondaries -> activated (reason 'none', managed-type: 'full')
Apr 23 12:14:09 orion NetworkManager[1237]: <info> [1745367249.0297] device (eduVPN): Activation: successful, device activated.
Apr 23 12:14:34 orion NetworkManager[1237]: <info> [1745367274.1105] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240
Yesterday I was able to connect to the VPN and still work with local network devices as I've enabled the "Allow LAN traffic" option. There was an update to eduVPN and now it doesn't allow local traffic anymore. I can't even ping my router unless I disconnect from the VPN. # Installation ``` curl https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc | gpg --import - pamac build python-eduvpn-client ``` # Version `eduVPN GUI version: 4.5.0 with eduvpn-common version: 3.0.0` # Check if your issue is in the known issues list Nothing about allowing local lan traffic in known issue list # OS/Distribution Arch ``` ❯ uname -a Linux orion 6.14.3-zen1-1-zen #1 ZEN SMP PREEMPT_DYNAMIC 2025年4月20日 12:38:36 +0000 x86_64 GNU/Linux ❯ lsb_release -a LSB Version: n/a Distributor ID: Garuda Description: Garuda Linux Broadwing Release: Soaring Codename: Broadwing ``` # Logs <details> <summary>log</summary> ``` ❯ eduvpn-gui -d 2025年04月23日 12:09:02,239 - MainThread - DEBUG - eduvpn.ui.app - app.py:69 - activate 2025年04月23日 12:09:02,284 - <function ApplicationModelTransitions.get_previous_servers at 0x7969cd361120> - DEBUG - eduvpn.app - app.py:48 - Transition: MAIN, old state: 1 2025年04月23日 12:09:03 - Go - DEBUG - got 304 for discovery, server_list.json not modified 2025年04月23日 12:09:03,584 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1075 - server list refresh 2025年04月23日 12:09:06,153 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1161 - on server row pressed 2025年04月23日 12:09:06,237 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1120 - activated server: <eduvpn.server.InstituteServer object at 0x7969cd32aad0> 2025年04月23日 12:09:06,238 - <function ApplicationModelTransitions.getting_config at 0x7969cd361580> - DEBUG - eduvpn.app - app.py:63 - Transition: GETTING_CONFIG, old state: 1 2025年04月23日 12:09:06 - Go - DEBUG - saving state file 2025年04月23日 12:09:06,517 - <function ApplicationModelTransitions.parse_config at 0x7969cd3620c0> - DEBUG - eduvpn.app - app.py:103 - Transition: GOT_CONFIG, old state: 4 2025年04月23日 12:09:06,517 - <function ApplicationModelTransitions.parse_connecting at 0x7969cd3625c0> - DEBUG - eduvpn.app - app.py:128 - Transition: CONNECTING, old state: 7 2025年04月23日 12:09:06,518 - MainThread - DEBUG - eduvpn.nm - nm.py:457 - writing wireguard configuration to Network Manager 2025年04月23日 12:09:06,520 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1234 - clicked on switch connection state 2025年04月23日 12:09:06,521 - MainThread - DEBUG - eduvpn.nm - nm.py:376 - Adding new connection 2025年04月23日 12:09:06,532 - MainThread - DEBUG - eduvpn.nm - nm.py:976 - Connection added for uuid: 92cb2312-bacd-4988-b062-910be48deb4d 2025年04月23日 12:09:06,532 - MainThread - DEBUG - eduvpn.nm - nm.py:688 - activate_connection: <NM.RemoteConnection object at 0x7969cd3cb440 (NMRemoteConnection at 0x638d5212cad0)> 2025年04月23日 12:09:06,543 - MainThread - DEBUG - eduvpn.nm - nm.py:712 - activate_connection_async result: <NM.ActiveConnection object at 0x796958314e40 (NMActiveConnection at 0x638d52582400)> 2025年04月23日 12:09:06 - Go - DEBUG - attempt an invalid self-transition: Connecting 2025年04月23日 12:09:06,637 - MainThread - DEBUG - eduvpn.app - app.py:201 - Failover should not continue 2025年04月23日 12:09:06,638 - <function ApplicationModelTransitions.parse_connected at 0x7969cd362520> - DEBUG - eduvpn.app - app.py:121 - Transition: CONNECTED, old state: 8 2025年04月23日 12:09:06,641 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1034 - start validity countdown 2025年04月23日 12:09:06,642 - MainThread - DEBUG - eduvpn.app - app.py:201 - Failover should not continue 2025年04月23日 12:09:14,924 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1082 - clicked settings button 2025年04月23日 12:09:19,409 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1094 - clicked on go back 2025年04月23日 12:09:27,587 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1082 - clicked settings button 2025年04月23日 12:09:28,560 - MainThread - DEBUG - eduvpn.config - config.py:54 - saving settings: {'ignore_keyring_warning': True, 'allow_wg_lan': True, 'proxy_active_warning': None} 2025年04月23日 12:09:31,835 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1094 - clicked on go back 2025年04月23日 12:09:32,750 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1234 - clicked on switch connection state 2025年04月23日 12:09:32,751 - <function ApplicationModelTransitions.disconnecting at 0x7969cd361940> - DEBUG - eduvpn.app - app.py:73 - Transition: DISCONNECTING, old state: 9 2025年04月23日 12:09:32,751 - MainThread - DEBUG - eduvpn.nm - nm.py:876 - disconnect uuid: <module 'uuid' from '/usr/lib/python3.13/uuid.py'> 2025年04月23日 12:09:32,752 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:992 - leave connected state 2025年04月23日 12:09:32,752 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1042 - stop validity countdown 2025年04月23日 12:09:32,752 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1056 - stop validity threads 2025年04月23日 12:09:32,760 - MainThread - DEBUG - eduvpn.nm - nm.py:865 - disconnect_async result: True 2025年04月23日 12:09:32,774 - MainThread - DEBUG - eduvpn.nm - nm.py:828 - delete_async result: True 2025年04月23日 12:09:32,775 - cleanup - DEBUG - eduvpn.app - app.py:514 - Cleaning up tokens... 2025年04月23日 12:09:32 - Go - DEBUG - saving state file 2025年04月23日 12:09:32,897 - <function ApplicationModelTransitions.disconnected_server at 0x7969cd361760> - DEBUG - eduvpn.app - app.py:68 - Transition: DISCONNECTED, old state: 10 2025年04月23日 12:10:48,721 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:1446 - clicked on close window 2025年04月23日 12:10:48,721 - MainThread - DEBUG - eduvpn.ui.app - app.py:106 - window closed 2025年04月23日 12:10:48,722 - MainThread - DEBUG - eduvpn.ui.app - app.py:96 - quit 2025年04月23日 12:10:48 - Go - DEBUG - saving state file 2025年04月23日 12:10:48,726 - <function ApplicationModelTransitions.deregistered at 0x7969cd3611c0> - DEBUG - eduvpn.app - app.py:53 - Transition: DEREGISTERED, old state: 11 2025年04月23日 12:10:48,727 - MainThread - DEBUG - eduvpn.ui.ui - ui.py:397 - deregistered transition ``` </details> ## Do you have a problem during or after connecting? <details> <summary>NetworkManager</summary> ``` ❯ sudo journalctl -fu NetworkManager Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7599] device (eduVPN): state change: activated -> deactivating (reason 'user-requested', managed-type: 'full') Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7606] audit: op="device-disconnect" interface="eduVPN" ifindex=12 pid=513059 uid=1000 result="success" Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7746] audit: op="connection-delete" uuid="92cb2312-bacd-4988-b062-910be48deb4d" name="eduVPN" pid=513059 uid=1000 result="success" Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.7816] device (eduVPN): state change: deactivating -> disconnected (reason 'user-requested', managed-type: 'full') Apr 23 12:09:32 orion NetworkManager[1237]: <info> [1745366972.9433] device (eduVPN): state change: disconnected -> unmanaged (reason 'user-requested', managed-type: 'full') Apr 23 12:09:57 orion NetworkManager[1237]: <info> [1745366997.1096] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240 Apr 23 12:10:53 orion NetworkManager[1237]: <info> [1745367053.1081] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240 Apr 23 12:11:49 orion NetworkManager[1237]: <info> [1745367109.1093] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240 Apr 23 12:12:44 orion NetworkManager[1237]: <info> [1745367164.1096] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240 Apr 23 12:13:40 orion NetworkManager[1237]: <info> [1745367220.1106] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240 Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1363] manager: (eduVPN): new WireGuard device (/org/freedesktop/NetworkManager/Devices/14) Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1365] audit: op="connection-add" uuid="c832ea19-ce51-4351-bccc-b553c88db663" name="eduVPN" pid=545661 uid=1000 result="success" Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1481] device (eduVPN): state change: unmanaged -> unavailable (reason 'managed', managed-type: 'external') Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1489] device (eduVPN): state change: unavailable -> disconnected (reason 'user-requested', managed-type: 'full') Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1492] device (eduVPN): Activation: starting connection 'eduVPN' (c832ea19-ce51-4351-bccc-b553c88db663) Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1492] audit: op="connection-activate" uuid="c832ea19-ce51-4351-bccc-b553c88db663" name="eduVPN" pid=545661 uid=1000 result="success" Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1494] device (eduVPN): state change: disconnected -> prepare (reason 'none', managed-type: 'full') Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1496] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full') Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1499] device (eduVPN): state change: config -> need-auth (reason 'none', managed-type: 'full') Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1505] device (eduVPN): state change: need-auth -> prepare (reason 'none', managed-type: 'full') Apr 23 12:14:07 orion NetworkManager[1237]: <info> [1745367247.1506] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full') Apr 23 12:14:08 orion NetworkManager[1237]: <info> [1745367248.9849] device (eduVPN): state change: config -> ip-config (reason 'none', managed-type: 'full') Apr 23 12:14:08 orion NetworkManager[1237]: <info> [1745367248.9901] device (eduVPN): state change: ip-config -> ip-check (reason 'none', managed-type: 'full') Apr 23 12:14:09 orion NetworkManager[1237]: <info> [1745367249.0293] device (eduVPN): state change: ip-check -> secondaries (reason 'none', managed-type: 'full') Apr 23 12:14:09 orion NetworkManager[1237]: <info> [1745367249.0294] device (eduVPN): state change: secondaries -> activated (reason 'none', managed-type: 'full') Apr 23 12:14:09 orion NetworkManager[1237]: <info> [1745367249.0297] device (eduVPN): Activation: successful, device activated. Apr 23 12:14:34 orion NetworkManager[1237]: <info> [1745367274.1105] dhcp4 (enp5s0): state changed new lease, address=10.44.163.240 ``` </details>

can you dump the output of ip rule list and ip route show table main?

What is the ip you're trying to connect to? E.g. of your router?

The client now with allow LAN only whitelists the following ranges:

10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 for IPv4 and fc00::/7 for IPv6

you can also e-mail at eduvpn-support@lists.geant.org instead of posting details publicly here

can you dump the output of `ip rule list` and `ip route show table main`? What is the ip you're trying to connect to? E.g. of your router? The client now with allow LAN only whitelists the following ranges: ``` 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 for IPv4 and fc00::/7 for IPv6 ``` you can also e-mail at eduvpn-support@lists.geant.org instead of posting details publicly here
Author
Copy link
❯ ip rule list
0: from all lookup local
1: not from all fwmark 0xca94 lookup 51860 suppress_prefixlength 0 proto static
2: from all to 10.0.0.0/8 lookup main suppress_prefixlength 0 proto static
2: from all to 172.16.0.0/12 lookup main suppress_prefixlength 0 proto static
2: from all to 192.168.0.0/16 lookup main suppress_prefixlength 0 proto static
3: not from all fwmark 0xca94 lookup 51860 proto static
32766: from all lookup main
32767: from all lookup default
❯ ip route show table main
default via 10.44.163.254 dev enp5s0 proto dhcp src 10.44.163.240 metric 100
10.44.163.0/24 dev enp5s0 proto kernel scope link src 10.44.163.240 metric 100
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev br-9329d1e9e346 proto kernel scope link src 172.18.0.1 linkdown
192.168.163.0/24 dev ztqu3lvpr7 proto kernel scope link src 192.168.163.240

The router is in the 10.44.163.254

``` ❯ ip rule list 0: from all lookup local 1: not from all fwmark 0xca94 lookup 51860 suppress_prefixlength 0 proto static 2: from all to 10.0.0.0/8 lookup main suppress_prefixlength 0 proto static 2: from all to 172.16.0.0/12 lookup main suppress_prefixlength 0 proto static 2: from all to 192.168.0.0/16 lookup main suppress_prefixlength 0 proto static 3: not from all fwmark 0xca94 lookup 51860 proto static 32766: from all lookup main 32767: from all lookup default ❯ ip route show table main default via 10.44.163.254 dev enp5s0 proto dhcp src 10.44.163.240 metric 100 10.44.163.0/24 dev enp5s0 proto kernel scope link src 10.44.163.240 metric 100 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 172.18.0.0/16 dev br-9329d1e9e346 proto kernel scope link src 172.18.0.1 linkdown 192.168.163.0/24 dev ztqu3lvpr7 proto kernel scope link src 192.168.163.240 ``` The router is in the `10.44.163.254`

Can you ping other devices in your network, apart from the router itself?

Can you ping other devices in your network, apart from the router itself?
Author
Copy link

No. All LAN devices are unreachable while the vpn is active.

No. All LAN devices are unreachable while the vpn is active.

what if you do then, ip route get ipyouretryingtoreach

e.g.
ip route get 10.44.163.5

please also show the output of ip route show table 51860

what if you do then, `ip route get ipyouretryingtoreach` e.g. ` ip route get 10.44.163.5 ` please also show the output of `ip route show table 51860`
Author
Copy link
❯ ip route get 10.44.163.254
10.44.163.254 dev eduVPN table 51860 src 10.96.136.9 uid 1000
cache
❯ ip route show table 51860
10.0.0.0/10 dev eduVPN proto static scope link metric 50
10.64.0.0/15 dev eduVPN proto static scope link metric 50
10.66.0.0/18 dev eduVPN proto static scope link metric 50
10.66.64.0/28 dev eduVPN proto static scope link metric 50
10.66.64.16/30 dev eduVPN proto static scope link metric 50
10.66.64.20 dev eduVPN proto static scope link metric 50
10.66.64.30/31 dev eduVPN proto static scope link metric 50
10.66.64.32/27 dev eduVPN proto static scope link metric 50
10.66.64.64/28 dev eduVPN proto static scope link metric 50
10.66.64.80/30 dev eduVPN proto static scope link metric 50
10.66.64.84 dev eduVPN proto static scope link metric 50
10.66.64.93 dev eduVPN proto static scope link metric 50
10.66.64.94/31 dev eduVPN proto static scope link metric 50
10.66.64.96/27 dev eduVPN proto static scope link metric 50
10.66.64.128/25 dev eduVPN proto static scope link metric 50
10.66.65.0/24 dev eduVPN proto static scope link metric 50
10.66.66.0/23 dev eduVPN proto static scope link metric 50
10.66.68.0/22 dev eduVPN proto static scope link metric 50
10.66.72.0/21 dev eduVPN proto static scope link metric 50
10.66.80.0/20 dev eduVPN proto static scope link metric 50
10.66.96.0/19 dev eduVPN proto static scope link metric 50
10.66.128.0/17 dev eduVPN proto static scope link metric 50
10.67.0.0/16 dev eduVPN proto static scope link metric 50
10.68.0.0/14 dev eduVPN proto static scope link metric 50
10.72.0.0/13 dev eduVPN proto static scope link metric 50
10.80.0.0/12 dev eduVPN proto static scope link metric 50
10.96.0.0/11 dev eduVPN proto static scope link metric 50
10.96.136.0/24 dev eduVPN proto kernel scope link src 10.96.136.9 metric 50
10.128.0.0/9 dev eduVPN proto static scope link metric 50
139.80.0.0/17 dev eduVPN proto static scope link metric 50
139.80.128.0/21 dev eduVPN proto static scope link metric 50
139.80.136.0/26 dev eduVPN proto static scope link metric 50
139.80.136.64/28 dev eduVPN proto static scope link metric 50
139.80.136.89 dev eduVPN proto static scope link metric 50
139.80.136.90/31 dev eduVPN proto static scope link metric 50
139.80.136.92/30 dev eduVPN proto static scope link metric 50
139.80.136.96/27 dev eduVPN proto static scope link metric 50
139.80.136.128/25 dev eduVPN proto static scope link metric 50
139.80.137.0/24 dev eduVPN proto static scope link metric 50
139.80.138.0/23 dev eduVPN proto static scope link metric 50
139.80.140.0/22 dev eduVPN proto static scope link metric 50
139.80.144.0/20 dev eduVPN proto static scope link metric 50
139.80.160.0/19 dev eduVPN proto static scope link metric 50
139.80.192.0/18 dev eduVPN proto static scope link metric 50
``` ❯ ip route get 10.44.163.254 10.44.163.254 dev eduVPN table 51860 src 10.96.136.9 uid 1000 cache ❯ ip route show table 51860 10.0.0.0/10 dev eduVPN proto static scope link metric 50 10.64.0.0/15 dev eduVPN proto static scope link metric 50 10.66.0.0/18 dev eduVPN proto static scope link metric 50 10.66.64.0/28 dev eduVPN proto static scope link metric 50 10.66.64.16/30 dev eduVPN proto static scope link metric 50 10.66.64.20 dev eduVPN proto static scope link metric 50 10.66.64.30/31 dev eduVPN proto static scope link metric 50 10.66.64.32/27 dev eduVPN proto static scope link metric 50 10.66.64.64/28 dev eduVPN proto static scope link metric 50 10.66.64.80/30 dev eduVPN proto static scope link metric 50 10.66.64.84 dev eduVPN proto static scope link metric 50 10.66.64.93 dev eduVPN proto static scope link metric 50 10.66.64.94/31 dev eduVPN proto static scope link metric 50 10.66.64.96/27 dev eduVPN proto static scope link metric 50 10.66.64.128/25 dev eduVPN proto static scope link metric 50 10.66.65.0/24 dev eduVPN proto static scope link metric 50 10.66.66.0/23 dev eduVPN proto static scope link metric 50 10.66.68.0/22 dev eduVPN proto static scope link metric 50 10.66.72.0/21 dev eduVPN proto static scope link metric 50 10.66.80.0/20 dev eduVPN proto static scope link metric 50 10.66.96.0/19 dev eduVPN proto static scope link metric 50 10.66.128.0/17 dev eduVPN proto static scope link metric 50 10.67.0.0/16 dev eduVPN proto static scope link metric 50 10.68.0.0/14 dev eduVPN proto static scope link metric 50 10.72.0.0/13 dev eduVPN proto static scope link metric 50 10.80.0.0/12 dev eduVPN proto static scope link metric 50 10.96.0.0/11 dev eduVPN proto static scope link metric 50 10.96.136.0/24 dev eduVPN proto kernel scope link src 10.96.136.9 metric 50 10.128.0.0/9 dev eduVPN proto static scope link metric 50 139.80.0.0/17 dev eduVPN proto static scope link metric 50 139.80.128.0/21 dev eduVPN proto static scope link metric 50 139.80.136.0/26 dev eduVPN proto static scope link metric 50 139.80.136.64/28 dev eduVPN proto static scope link metric 50 139.80.136.89 dev eduVPN proto static scope link metric 50 139.80.136.90/31 dev eduVPN proto static scope link metric 50 139.80.136.92/30 dev eduVPN proto static scope link metric 50 139.80.136.96/27 dev eduVPN proto static scope link metric 50 139.80.136.128/25 dev eduVPN proto static scope link metric 50 139.80.137.0/24 dev eduVPN proto static scope link metric 50 139.80.138.0/23 dev eduVPN proto static scope link metric 50 139.80.140.0/22 dev eduVPN proto static scope link metric 50 139.80.144.0/20 dev eduVPN proto static scope link metric 50 139.80.160.0/19 dev eduVPN proto static scope link metric 50 139.80.192.0/18 dev eduVPN proto static scope link metric 50 ```

Same here... same eduVPN version on Fedora 42. Let me give more info.

My router is at 192.168.178.1 and my HA is at 192.168.178.35. I cannot access them when vpn is on.

My docker daemon address pool is

{
"default-address-pools":
[
{"base":"172.19.0.0/16","size":24}
]
}

Can I edit the whitelist somehow and try to access my docker containers at 172.19.0.0/12?

Same here... same eduVPN version on Fedora 42. Let me give more info. My router is at 192.168.178.1 and my HA is at 192.168.178.35. I cannot access them when vpn is on. My docker daemon address pool is { "default-address-pools": [ {"base":"172.19.0.0/16","size":24} ] } Can I edit the whitelist somehow and try to access my docker containers at 172.19.0.0/12?

i don't know if i create a separate issue about the "allow LAN-Traffic" feature, but when proxyguard is in use and this feature is enabled under linux no websites (for example our webserver fh-swf.de(193.174.68.10) loading but routes are installed. When i disable vpn and switch off "allow LAN-Traffic" feature and reconnect with tcp all sites worked as expected.

i don't know if i create a separate issue about the "allow LAN-Traffic" feature, but when proxyguard is in use and this feature is enabled under linux no websites (for example our webserver fh-swf.de(193.174.68.10) loading but routes are installed. When i disable vpn and switch off "allow LAN-Traffic" feature and reconnect with tcp all sites worked as expected.

@AckDeGo wrote in #635 (comment):

i don't know if i create a separate issue about the "allow LAN-Traffic" feature, but when proxyguard is in use and this feature is enabled under linux no websites (for example our webserver fh-swf.de(193.174.68.10) loading but routes are installed. When i disable vpn and switch off "allow LAN-Traffic" feature and reconnect with tcp all sites worked as expected.

can you confirm this is a split tunnel profile?

@AckDeGo wrote in https://codeberg.org/eduVPN/linux-app/issues/635#issuecomment-4039175: > i don't know if i create a separate issue about the "allow LAN-Traffic" feature, but when proxyguard is in use and this feature is enabled under linux no websites (for example our webserver fh-swf.de(193.174.68.10) loading but routes are installed. When i disable vpn and switch off "allow LAN-Traffic" feature and reconnect with tcp all sites worked as expected. can you confirm this is a split tunnel profile?

do@stefanosgeo wrote in #635 (comment):

Same here... same eduVPN version on Fedora 42. Let me give more info.

My router is at 192.168.178.1 and my HA is at 192.168.178.35. I cannot access them when vpn is on.

My docker daemon address pool is

{ "default-address-pools": [ {"base":"172.19.0.0/16","size":24} ] }

Can I edit the whitelist somehow and try to access my docker containers at 172.19.0.0/12?

do you mean you want to whitelist 172.19.0.0/16? This should already be whitelisted (172.16.0.0/12). So this would be a bug, I am investigating. Is this also a split tunnel profile?

do@stefanosgeo wrote in https://codeberg.org/eduVPN/linux-app/issues/635#issuecomment-3962180: > Same here... same eduVPN version on Fedora 42. Let me give more info. > > My router is at 192.168.178.1 and my HA is at 192.168.178.35. I cannot access them when vpn is on. > > My docker daemon address pool is > > { "default-address-pools": [ {"base":"172.19.0.0/16","size":24} ] } > > Can I edit the whitelist somehow and try to access my docker containers at 172.19.0.0/12? do you mean you want to whitelist 172.19.0.0/16? This should already be whitelisted (172.16.0.0/12). So this would be a bug, I am investigating. Is this also a split tunnel profile?

@jwijenbergh wrote in #635 (comment):

do@stefanosgeo wrote in #635 (comment):

Same here... same eduVPN version on Fedora 42. Let me give more info.
My router is at 192.168.178.1 and my HA is at 192.168.178.35. I cannot access them when vpn is on.
My docker daemon address pool is
{ "default-address-pools": [ {"base":"172.19.0.0/16","size":24} ] }
Can I edit the whitelist somehow and try to access my docker containers at 172.19.0.0/12?

do you mean you want to whitelist 172.19.0.0/16? This should already be whitelisted (172.16.0.0/12). So this would be a bug, I am investigating. Is this also a split tunnel profile?

thanks for looking into this. Yes it's a split tunnel profile

@jwijenbergh wrote in https://codeberg.org/eduVPN/linux-app/issues/635#issuecomment-4047041: > do@stefanosgeo wrote in #635 (comment): > > > Same here... same eduVPN version on Fedora 42. Let me give more info. > > My router is at 192.168.178.1 and my HA is at 192.168.178.35. I cannot access them when vpn is on. > > My docker daemon address pool is > > { "default-address-pools": [ {"base":"172.19.0.0/16","size":24} ] } > > Can I edit the whitelist somehow and try to access my docker containers at 172.19.0.0/12? > > do you mean you want to whitelist 172.19.0.0/16? This should already be whitelisted (172.16.0.0/12). So this would be a bug, I am investigating. Is this also a split tunnel profile? thanks for looking into this. Yes it's a split tunnel profile

Until the bug fix is released, a temporary workaround, is to add the following rules

ip -4 rule add prio 1 from all lookup main suppress_prefixlength 0
ip -6 rule add prio 1 from all lookup main suppress_prefixlength 0
Until the bug fix is released, a temporary workaround, is to add the following rules ``` ip -4 rule add prio 1 from all lookup main suppress_prefixlength 0 ip -6 rule add prio 1 from all lookup main suppress_prefixlength 0 ```

Can someone try #637?

Can someone try #637?

@stefanosgeo wrote in #635 (comment):

Until the bug fix is released, a temporary workaround, is to add the following rules

ip -4 rule add prio 1 from all lookup main suppress_prefixlength 0
ip -6 rule add prio 1 from all lookup main suppress_prefixlength 0

This would indeed fix it, but I recommend to not do this as this would take any non-default route from the main routing table, which could be malicious if you're in an untrusted network

@stefanosgeo wrote in https://codeberg.org/eduVPN/linux-app/issues/635#issuecomment-4048916: > Until the bug fix is released, a temporary workaround, is to add the following rules > > ```text > ip -4 rule add prio 1 from all lookup main suppress_prefixlength 0 > ip -6 rule add prio 1 from all lookup main suppress_prefixlength 0 > ``` This would indeed fix it, but I recommend to not do this as this would take *any* non-default route from the main routing table, which could be malicious if you're in an untrusted network

@jwijenbergh wrote in #635 (comment):

@AckDeGo wrote in #635 (Kommentar):

i don't know if i create a separate issue about the "allow LAN-Traffic" feature, but when proxyguard is in use and this feature is enabled under linux no websites (for example our webserver fh-swf.de(193.174.68.10) loading but routes are installed. When i disable vpn and switch off "allow LAN-Traffic" feature and reconnect with tcp all sites worked as expected.

can you confirm this is a split tunnel profile?

Yes i can confirm split-tunnel profile.

@jwijenbergh wrote in https://codeberg.org/eduVPN/linux-app/issues/635#issuecomment-4047038: > @AckDeGo wrote in #635 (Kommentar): > > > i don't know if i create a separate issue about the "allow LAN-Traffic" feature, but when proxyguard is in use and this feature is enabled under linux no websites (for example our webserver fh-swf.de(193.174.68.10) loading but routes are installed. When i disable vpn and switch off "allow LAN-Traffic" feature and reconnect with tcp all sites worked as expected. > > can you confirm this is a split tunnel profile? Yes i can confirm split-tunnel profile.

Same issue here:

$ eduvpn-gui --version
eduVPN GUI version: 4.5.0 with eduvpn-common version: 3.0.0
# uname -a
Linux debian12UTM 6.1.0-34-arm64 #1 SMP Debian 6.1.135-1 (2025年04月25日) aarch64 GNU/Linux

Only WireGuard seems to be affected, OpenVPN still works.

Same issue here: ``` $ eduvpn-gui --version eduVPN GUI version: 4.5.0 with eduvpn-common version: 3.0.0 # uname -a Linux debian12UTM 6.1.0-34-arm64 #1 SMP Debian 6.1.135-1 (2025年04月25日) aarch64 GNU/Linux ``` Only WireGuard seems to be affected, OpenVPN still works.

Fixed in the main branch. Will release

Fixed in the main branch. Will release

Released now, let me know if any issues https://codeberg.org/eduVPN/linux-app/releases/tag/4.5.1

Released now, let me know if any issues https://codeberg.org/eduVPN/linux-app/releases/tag/4.5.1

@jwijenbergh It it works for me...great job!! Thank you very much!

@jwijenbergh It it works for me...great job!! Thank you very much!
Sign in to join this conversation.
No Branch/Tag specified
master
upstream-deb
openvpn-persistent
1.x
4.7.2
4.7.1
4.7.0
4.6.0
4.5.1
4.5.0
4.4.99.0
4.4.0
4.3.1
4.3.0
4.2.99.1
4.2.99.0
4.2.1
4.2.0
4.1.99.0
4.1.3
4.1.2
4.1.1
4.1.0
3.1.1
4.0.1
4.0.0
pr-3.3.1
pr-3.3.0
pr-3.2.0
3.1.0
3.0.0
2.2.1
2.2.0
2.1.0
2.0.0
1.1
1.0.3
1.0.2
1.0.1
1.0rc17
1.0rc16
1.0rc15
1.0rc14
1.0rc13
1.0rc12
1.0rc11
1.0rc10
1.0rc9
1.0rc8
1.0rc7
1.0rc6
1.0rc5
1.0rc4
1.0rc3
1.0rc2
1.0rc1
0.8
0.7.2
0.7.1
0.7
0.6.1
0.6
0.5.1
0.5
0.3
0.2.1
0.2
0.1.1
0.1
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
5 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/linux-app#635
Reference in a new issue
eduVPN/linux-app
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?