wared

Thanks binhex, you are right it's not correct but even with your link I'm still struggling to configure LAN_NETWORK correctly. I have a dedicated server and just a public IP... LAN_NETWORK is required ?

Hi, I have the same problem as kurdy34 but ip_mangle module is loaded on my ubuntu. I'm using AirVPN. When I set VPN_ENABLED=no, I can access to the WebUI from my public IP X.X.X.X:8112 but if I set VPN_ENABLED=yes, it breaks the WebUI. When I create a ssh tunnel, I can access to the WebUI from localhost:8112. This is my docker-compose.yml : version: '3.7' services: deluge: image: binhex/arch-delugevpn:latest container_name: deluge restart: always cap_add: - NET_ADMIN ports: - 8112:8112 - 8118:8118 - 58846:58846 - 58946:58946 environment: - PUID=${PUID} - PGID=${PGID} - VPN_ENABLED=yes - VPN_PROV=airvpn - ENABLE_PRIVOXY=yes - LAN_NETWORK=192.168.1.0/24 - NAME_SERVERS=209.222.18.222,37.235.1.174,8.8.8.8,209.222.18.218,37.235.1.177,8.8.4.4 - UMASK=000 - DEBUG=false volumes: - /home/media/deluge/config:/config - /etc/localtime:/etc/localtime:ro - ${PATH_DOWNLOADS}:/downloads And my logs : Created by... ___. .__ .__ \_ |__ |__| ____ | |__ ____ ___ ___ | __ \| |/ \| | \_/ __ \\ \/ / | \_\ \ | | \ Y \ ___/ > < |___ /__|___| /___| /\___ >__/\_ \ \/ \/ \/ \/ \/ https://hub.docker.com/u/binhex/ 2019-09-13 11:54:31.704033 [info] System information Linux c3e3ddb4fc05 4.15.0-52-generic #56-Ubuntu SMP Tue Jun 4 22:49:08 UTC 2019 x86_64 GNU/Linux 2019-09-13 11:54:31.840883 [info] PUID defined as '1001' 2019-09-13 11:54:32.017950 [info] PGID defined as '1001' 2019-09-13 11:54:32.183732 [info] UMASK defined as '000' 2019-09-13 11:54:32.299525 [info] Permissions already set for volume mappings 2019-09-13 11:54:32.428025 [info] DELUGE_DAEMON_LOG_LEVEL not defined,(via -e DELUGE_DAEMON_LOG_LEVEL), defaulting to 'info' 2019-09-13 11:54:32.544359 [info] DELUGE_WEB_LOG_LEVEL not defined,(via -e DELUGE_WEB_LOG_LEVEL), defaulting to 'info' 2019-09-13 11:54:32.661192 [info] VPN_ENABLED defined as 'yes' 2019-09-13 11:54:32.795653 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/AirVPN_Germany_UDP-443.ovpn dos2unix: converting file /config/openvpn/AirVPN_Germany_UDP-443.ovpn to Unix format... 2019-09-13 11:54:32.957344 [info] VPN remote line defined as 'remote de.vpn.airdns.org 443' 2019-09-13 11:54:33.074783 [info] VPN_REMOTE defined as 'de.vpn.airdns.org' 2019-09-13 11:54:33.197060 [info] VPN_PORT defined as '443' 2019-09-13 11:54:33.325685 [info] VPN_PROTOCOL defined as 'udp' 2019-09-13 11:54:33.443835 [info] VPN_DEVICE_TYPE defined as 'tun0' 2019-09-13 11:54:33.559958 [info] VPN_PROV defined as 'airvpn' 2019-09-13 11:54:33.678633 [info] LAN_NETWORK defined as '192.168.1.0/24' 2019-09-13 11:54:33.796067 [info] NAME_SERVERS defined as '209.222.18.222,37.235.1.174,8.8.8.8,209.222.18.218,37.235.1.177,8.8.4.4' 2019-09-13 11:54:33.913313 [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS) 2019-09-13 11:54:34.031323 [info] ENABLE_PRIVOXY defined as 'yes' 2019-09-13 11:54:34.652926 [info] Starting Supervisor... 2019-09-13 11:54:35,463 INFO Included extra file "/etc/supervisor/conf.d/delugevpn.conf" during parsing 2019-09-13 11:54:35,463 INFO Set uid to user 0 succeeded 2019-09-13 11:54:35,472 INFO supervisord started with pid 7 2019-09-13 11:54:36,477 INFO spawned: 'start-script' with pid 142 2019-09-13 11:54:36,482 INFO spawned: 'watchdog-script' with pid 143 2019-09-13 11:54:36,484 INFO reaped unknown pid 8 2019-09-13 11:54:36,512 DEBG 'start-script' stdout output: [info] VPN is enabled, beginning configuration of VPN 2019-09-13 11:54:36,513 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2019-09-13 11:54:36,513 INFO success: watchdog-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2019-09-13 11:54:36,521 DEBG 'watchdog-script' stderr output: dos2unix: 2019-09-13 11:54:36,522 DEBG 'watchdog-script' stderr output: converting file /config/core.conf to Unix format... 2019-09-13 11:54:36,644 DEBG 'start-script' stdout output: [info] Default route for container is 172.18.0.1 2019-09-13 11:54:36,656 DEBG 'start-script' stdout output: [info] Adding 209.222.18.222 to /etc/resolv.conf 2019-09-13 11:54:36,667 DEBG 'start-script' stdout output: [info] Adding 37.235.1.174 to /etc/resolv.conf 2019-09-13 11:54:36,678 DEBG 'start-script' stdout output: [info] Adding 8.8.8.8 to /etc/resolv.conf 2019-09-13 11:54:36,689 DEBG 'start-script' stdout output: [info] Adding 209.222.18.218 to /etc/resolv.conf 2019-09-13 11:54:36,700 DEBG 'start-script' stdout output: [info] Adding 37.235.1.177 to /etc/resolv.conf 2019-09-13 11:54:36,711 DEBG 'start-script' stdout output: [info] Adding 8.8.4.4 to /etc/resolv.conf 2019-09-13 11:54:36,896 DEBG 'start-script' stdout output: [info] Attempting to load tun kernel module... 2019-09-13 11:54:36,900 DEBG 'start-script' stderr output: modprobe: FATAL: Module tun not found in directory /lib/modules/4.15.0-52-generic 2019-09-13 11:54:36,901 DEBG 'start-script' stdout output: [warn] Unable to load tun kernel module using modprobe, trying insmod... 2019-09-13 11:54:36,905 DEBG 'start-script' stderr output: insmod: ERROR: could not load module /lib/modules/tun.ko: No such file or directory 2019-09-13 11:54:36,906 DEBG 'start-script' stdout output: [warn] Unable to load tun kernel module, assuming its dynamically loaded 2019-09-13 11:54:36,992 DEBG 'start-script' stdout output: [info] Docker network defined as 172.18.0.0/16 2019-09-13 11:54:37,004 DEBG 'start-script' stdout output: [info] Adding 192.168.1.0/24 as route via docker eth0 2019-09-13 11:54:37,008 DEBG 'start-script' stdout output: [info] ip route defined as follows... -------------------- 2019-09-13 11:54:37,012 DEBG 'start-script' stdout output: default via 172.18.0.1 dev eth0 172.18.0.0/16 dev eth0 proto kernel scope link src 172.18.0.2 192.168.1.0/24 via 172.18.0.1 dev eth0 2019-09-13 11:54:37,013 DEBG 'start-script' stdout output: -------------------- 2019-09-13 11:54:37,025 DEBG 'start-script' stdout output: iptable_mangle 16384 0 ip_tables 28672 3 iptable_filter,iptable_nat,iptable_mangle x_tables 40960 9 xt_conntrack,iptable_filter,xt_tcpudp,ipt_MASQUERADE,xt_addrtype,xt_nat,ip_tables,iptable_mangle,xt_mark 2019-09-13 11:54:37,026 DEBG 'start-script' stdout output: [info] iptable_mangle support detected, adding fwmark for tables 2019-09-13 11:54:37,266 DEBG 'start-script' stdout output: [info] iptables defined as follows... -------------------- 2019-09-13 11:54:37,272 DEBG 'start-script' stdout output: -P INPUT DROP -P FORWARD DROP -P OUTPUT DROP -A INPUT -s 172.18.0.0/16 -d 172.18.0.0/16 -j ACCEPT -A INPUT -i eth0 -p udp -m udp --sport 443 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 8112 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --sport 8112 -j ACCEPT -A INPUT -s 192.168.1.0/24 -i eth0 -p tcp -m tcp --dport 58846 -j ACCEPT -A INPUT -s 192.168.1.0/24 -d 172.18.0.0/16 -i eth0 -p tcp -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i tun0 -j ACCEPT -A OUTPUT -s 172.18.0.0/16 -d 172.18.0.0/16 -j ACCEPT -A OUTPUT -o eth0 -p udp -m udp --dport 443 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --dport 8112 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --sport 8112 -j ACCEPT -A OUTPUT -d 192.168.1.0/24 -o eth0 -p tcp -m tcp --sport 58846 -j ACCEPT -A OUTPUT -s 172.18.0.0/16 -d 192.168.1.0/24 -o eth0 -p tcp -j ACCEPT -A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o tun0 -j ACCEPT 2019-09-13 11:54:37,275 DEBG 'start-script' stdout output: -------------------- 2019-09-13 11:54:37,278 DEBG 'start-script' stdout output: [info] Starting OpenVPN... 2019-09-13 11:54:37,302 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 OpenVPN 2.4.7 [git:makepkg/2b8aec62d5db2c17+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 19 2019 Fri Sep 13 11:54:37 2019 library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10 2019-09-13 11:54:37,305 DEBG 'start-script' stdout output: [info] OpenVPN started Fri Sep 13 11:54:37 2019 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2019-09-13 11:54:37,306 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 2019-09-13 11:54:37,307 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 2019-09-13 11:54:37,309 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]185.189.112.10:443 2019-09-13 11:54:37,310 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 Socket Buffers: R=[212992->212992] S=[212992->212992] 2019-09-13 11:54:37,311 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 UDP link local: (not bound) 2019-09-13 11:54:37,312 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 UDP link remote: [AF_INET]185.189.112.10:443 2019-09-13 11:54:37,325 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 TLS: Initial packet from [AF_INET]185.189.112.10:443, sid=17298955 46033647 2019-09-13 11:54:37,369 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, [email protected] 2019-09-13 11:54:37,371 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 VERIFY KU OK Fri Sep 13 11:54:37 2019 Validating certificate extended key usage 2019-09-13 11:54:37,372 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Fri Sep 13 11:54:37 2019 VERIFY EKU OK Fri Sep 13 11:54:37 2019 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Errai, [email protected] 2019-09-13 11:54:37,875 DEBG 'start-script' stdout output: Fri Sep 13 11:54:37 2019 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Fri Sep 13 11:54:37 2019 [Errai] Peer Connection Initiated with [AF_INET]185.189.112.10:443 2019-09-13 11:54:38,927 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 SENT CONTROL [Errai]: 'PUSH_REQUEST' (status=1) 2019-09-13 11:54:38,939 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.16.184.1,route-gateway 10.16.184.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.16.184.239 255.255.255.0,peer-id 1,cipher AES-256-GCM' 2019-09-13 11:54:38,939 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: timers and/or timeouts modified Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: compression parms modified Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: --ifconfig/up options modified Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: route options modified Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: route-related options modified Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: peer-id set Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: adjusting link_mtu to 1625 Fri Sep 13 11:54:38 2019 OPTIONS IMPORT: data channel crypto options modified Fri Sep 13 11:54:38 2019 Data Channel: using negotiated cipher 'AES-256-GCM' 2019-09-13 11:54:38,940 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Fri Sep 13 11:54:38 2019 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key 2019-09-13 11:54:38,941 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 ROUTE_GATEWAY 172.18.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:12:00:02 2019-09-13 11:54:38,941 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 TUN/TAP device tun0 opened Fri Sep 13 11:54:38 2019 TUN/TAP TX queue length set to 100 Fri Sep 13 11:54:38 2019 /usr/bin/ip link set dev tun0 up mtu 1500 2019-09-13 11:54:38,946 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 /usr/bin/ip addr add dev tun0 10.16.184.239/24 broadcast 10.16.184.255 2019-09-13 11:54:38,951 DEBG 'start-script' stdout output: Fri Sep 13 11:54:38 2019 /root/openvpnup.sh tun0 1500 1553 10.16.184.239 255.255.255.0 init 2019-09-13 11:54:39,110 DEBG 'start-script' stdout output: [info] Application does not require port forwarding or VPN provider is != pia, skipping incoming port assignment 2019-09-13 11:54:39,111 DEBG 'start-script' stdout output: [info] Checking we can resolve name 'www.google.com' to address... 2019-09-13 11:54:39,123 DEBG 'start-script' stdout output: [debug] Having issues resolving name 'www.google.com', sleeping before retry... 2019-09-13 11:54:44,012 DEBG 'start-script' stdout output: Fri Sep 13 11:54:44 2019 /usr/bin/ip route add 185.189.112.10/32 via 172.18.0.1 2019-09-13 11:54:44,018 DEBG 'start-script' stdout output: Fri Sep 13 11:54:44 2019 /usr/bin/ip route add 0.0.0.0/1 via 10.16.184.1 2019-09-13 11:54:44,023 DEBG 'start-script' stdout output: Fri Sep 13 11:54:44 2019 /usr/bin/ip route add 128.0.0.0/1 via 10.16.184.1 2019-09-13 11:54:44,028 DEBG 'start-script' stdout output: Fri Sep 13 11:54:44 2019 Initialization Sequence Completed 2019-09-13 11:54:44,240 DEBG 'start-script' stdout output: [info] DNS operational, we can resolve name 'www.google.com' to address '172.217.9.36' 2019-09-13 11:54:44,247 DEBG 'start-script' stdout output: [info] Attempting to get external IP using Name Server 'ns1.google.com'... 2019-09-13 11:54:44,346 DEBG 'start-script' stdout output: [info] Successfully retrieved external IP address 185.189.112.11 2019-09-13 11:54:44,404 DEBG 'watchdog-script' stdout output: [info] Deluge listening interface IP 0.0.0.0 and VPN provider IP 10.16.184.239 different, marking for reconfigure 2019-09-13 11:54:44,420 DEBG 'watchdog-script' stdout output: [info] Deluge not running 2019-09-13 11:54:44,432 DEBG 'watchdog-script' stdout output: [info] Deluge Web UI not running 2019-09-13 11:54:44,446 DEBG 'watchdog-script' stdout output: [info] Privoxy not running [info] Attempting to start Deluge... [info] Removing deluge pid file (if it exists)... 2019-09-13 11:54:45,837 DEBG 'watchdog-script' stdout output: [info] Deluge key 'listen_interface' currently has an undefined value [info] Deluge key 'listen_interface' will have a new value '10.16.184.239' [info] Writing changes to Deluge config file '/config/core.conf'... 2019-09-13 11:54:47,345 DEBG 'watchdog-script' stdout output: [info] Deluge key 'outgoing_interface' currently has an undefined value [info] Deluge key 'outgoing_interface' will have a new value 'tun0' [info] Writing changes to Deluge config file '/config/core.conf'... 2019-09-13 11:54:48,235 DEBG 'watchdog-script' stdout output: [info] Deluge key 'default_daemon' currently has a value of 'b26e3e763b004823b66e5304b1a56f81' [info] Deluge key 'default_daemon' will have a new value 'b26e3e763b004823b66e5304b1a56f81' [info] Writing changes to Deluge config file '/config/web.conf'... 2019-09-13 11:54:49,667 DEBG 'watchdog-script' stdout output: [info] Deluge process started [info] Waiting for Deluge process to start listening on port 58846... 2019-09-13 11:54:50,409 DEBG 'watchdog-script' stdout output: [info] Deluge process listening on port 58846 2019-09-13 11:55:04,425 DEBG 'watchdog-script' stdout output: [info] No torrents with state 'Error' found 2019-09-13 11:55:04,426 DEBG 'watchdog-script' stdout output: [info] Starting Deluge Web UI... 2019-09-13 11:55:04,426 DEBG 'watchdog-script' stdout output: [info] Deluge Web UI started 2019-09-13 11:55:04,442 DEBG 'watchdog-script' stdout output: [info] Attempting to start Privoxy... 2019-09-13 11:55:05,460 DEBG 'watchdog-script' stdout output: [info] Privoxy process started [info] Waiting for Privoxy process to start listening on port 8118... 2019-09-13 11:55:05,480 DEBG 'watchdog-script' stdout output: [info] Privoxy process listening on port 8118 Thanks in advance !