I am trying to open port 1194 for UDP openvpn traffic.
'ufw status' shows it should be open:
$ sudo ufw status
WARN: Duplicate profile 'Apache', using last found
WARN: Duplicate profile 'Apache Secure', using last found
WARN: Duplicate profile 'Apache Full', using last found
Status: active
To Action From
-- ------ ----
...
1194/udp ALLOW Anywhere
1194/udp (v6) ALLOW Anywhere (v6)
According to iptables, it is open:
$ sudo iptables -L | less
...
Chain ufw-user-input (1 references)
...
ACCEPT udp -- anywhere anywhere udp dpt:openvpn
OpenVPN is listening on that port (if I am interpreting this correctly):
$ sudo netstat -vaun
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
...
udp 0 0 0.0.0.0:1194 0.0.0.0:*
But the port 1194 is closed - I can't connect my client, and online UDP port scanners say it is closed.
I have just tried running nmap, and see this:
$ sudo nmap -sU localhost -p 1194
Starting Nmap 6.40 ( http://nmap.org ) at 2016-11-13 17:58 GMT
Nmap scan report for localhost (127.0.0.1)
Host is up.
PORT STATE SERVICE
1194/udp open|filtered openvpn
I guess "filtered" is the problem (or maybe not, as it is UDP?), but am not sure how to fix it. Does anyone have any ideas?
Update: Apologies to the user who kindly placed a bounty on this question, and all those who have offered advice, but embarrassingly this is now working after a physical reboot of both server and client. I can't even say for sure which one fixed it - but since I believe I restarted all affected services on the server after making changes, I actually wonder if the Windows OpenVPN client may have needed a restart after the TAP driver installation so to anyone reading this, if you are having problems, try a different client eg OpenVPN Connect on Android. Again, apologies for not trying this sooner!
sudo ufw show listening
say?