[Support] binhex - DelugeVPN

There has been an issue raised on GitHub related to tracker announce request IP leakage under certain circumstances, after careful review of iptables i have tightened up the rules to prevent this. A new image has now been rolled out for all vpn enabled docker images (25th Feb 2021) i produce with the fix in place, i would encourage everyone to update to the recently created 'latest' tagged image. You can force the upgrade by toggling 'basic view' to 'advanced view' and then clicking on

Recommended by binhex

Ryanoc3ros

June 28, 20233 yr

Found the solution on reddit. Due to the recent change in the authentication process, using your email and password for the manual connection method will no longer work. You will need to use the service credentials instead. You can find your service credentials by following these steps: Please log in to your Nord Account by following this link: https://my.nordaccount.com/dashboard/nordvpn/ Click on the NordVPN tab on the left panel which is under the Services tab.

NordVPN authentication issues - Solution

Recommended by binhex

January 11, 20215 yr

1 minute ago, binhex said:

i woldnt be too concerned with this, if you can see the web ui for deluge then the vpn is up and running, and yes ipv6 is blocked via iptables in any case to prevent ipv6 leakage.

I still don't see what I am doing wrong.

Do I screenshot my edit screen? Blanking sensitive info?

Quote

Replies 10.8k
Views 2.4m
Created 10 yr10 yr
Last Reply 5 hr5 hr

Popular Days

Posted Images

January 11, 20215 yr

Author

Just now, Paul_Ber said:

I still don't see what I am doing wrong.

Do I screenshot my edit screen? Blanking sensitive info?

go to airvpn provider, allocate yourself an port forward through the airvpn website, go to deluge settings and set that same port as your incoming port.

Quote

January 11, 20215 yr

3 minutes ago, binhex said:

go to airvpn provider, allocate yourself an port forward through the airvpn website, go to deluge settings and set that same port as your incoming port.

I already did that. Or do it again?

Edited January 11, 20215 yr by Paul_Ber

Quote

January 11, 20215 yr

Author

Just now, Paul_Ber said:

I already did that. Or do it again?

if you have done that, then you should be set, have you verified the paths for incomplete and completed folders are correct?, they should be something like /data/incomplete and /data/completed,

Quote

January 11, 20215 yr

Ok I'll check that next. Thanks.

Quote

January 11, 20215 yr

5 minutes ago, binhex said:

if you have done that, then you should be set, have you verified the paths for incomplete and completed folders are correct?, they should be something like /data/incomplete and /data/completed,

Ok one question in Deluge do include 'Media' as the root directory?

This is my mapping in the Docker edit screen:

Screenshot_20210111-084146_Chrome.jpg.287016ec32b61efeb27e26ecd93cf935.jpg

Actually I think I answered my own question. In Deluge where I have 'Media' it should be 'data. I think when I change to 'data in Deluge download settings it should work. I think it started downloading then couldn't find 'Media' so it had nowhere to save and stopped downloading.

Quote

January 11, 20215 yr

Author

1 minute ago, Paul_Ber said:

In Deluge where I have 'Media' it should be 'data.

correct, /Media does NOT exist in the container, its /data

Edited January 11, 20215 yr by binhex

Quote

January 11, 20215 yr

20 minutes ago, binhex said:

correct, /Media does NOT exist in the container, its /data

Ok changed that and it works now but had restart DelugeVPN because somehow the Media was still in the move completed when clicking the Torrent and looking at bottom options.

Funny how I was stuck on 'Media', that is because on my personal DelugeVPN-flexget version the container mapping was /Media that way could never get it wrong.

Now to get my DelugeVPN-flexget Docker working again. Something in my github code is wrong, it builds fine just something not correct, only thing that works is flexget by console. I'll have to compare your code with mine.

If I went a different route and just made a Flexget only Docker how would Flexget communicate with Deluge? To send the Torrent with the move_done location? Per SpaceInvader video you can have one Docker use another Dockers internet to use that Dockers VPN. Would have the issue of the Flexget ports for website but that doesn't really work anyways.

Edited January 11, 20215 yr by Paul_Ber
Spelling & add Docker making questions

Quote

January 12, 20215 yr

@binhex should "<HostDir>/mnt/user/appdata/data</HostDir>" be something different in your delugevpn docker-template?

On my end I changed the HostDir that maps to ContainerDir. I didn't want my downloads to end up in my appdata folder which on cache only.

Didn't Limetech change the /mnt/cache/appdata to /mnt/user/appdata, they treat appdata like a share and as longs as appdata share is set to prefer cache, your appdata stays on the cache pool?

image.png.86cbdd437195a22b930a6df9584a900a.png

Quote

January 12, 20215 yr

Author

7 hours ago, Paul_Ber said:

should "<HostDir>/mnt/user/appdata/data</HostDir>" be something different in your delugevpn docker-template?

no, it has to target /mnt/user/appdata/... as the user may or may not have a cache drive.

7 hours ago, Paul_Ber said:

I didn't want my downloads to end up in my appdata folder which on cache only.

why not?, most people download incomplete and completed to cache, then use sonarr/radarr/medusa etc to rename, delete cruft, and move to the array, works for me.

Quote

January 12, 20215 yr

8 hours ago, binhex said:

no, it has to target /mnt/user/appdata/... as the user may or may not have a cache drive.

why not?, most people download incomplete and completed to cache, then use sonarr/radarr/medusa etc to rename, delete cruft, and move to the array, works for me.

Flexget gives Deluge where to save the files to show up into /mnt/user/Media/Movies/Movie_name or /mnt/usr/Media/TV/TVshow_name

Quote

January 12, 20215 yr

Hey there!

I've been using unRAID for about a year now, and have had great success using it as a Plex server. Recently I've installed delugevpn, and was able to set it up and test out some public torrents. It seems to work great, except that once or twice a day it causes my server to be completely unresponsive. I lose connection to the Deluge webGUI, Plex, and my Samba shares. It's easily solved by a hard reset on the server. Is there a common issue that would cause this? Thanks for the help.

Cassius

Quote

January 13, 20215 yr

Hey Guys,

I had this docker working for some time now. Then i updated the server to 6.8.3 and also updated to the latest version of the docker and i couldn't get the torrents like ubuntu to download. So i decided to start all over and deleted the whole container and the appdata.

I am trying to set it up again and the webui does not want to come up. I already downloaded the ovpn from nordvpn and placed my credentials and when i look at the logs it says is ok. But the WebUI does not want to come up for me to finish the installation.

Any help is greatly appreciated.

Quote

January 13, 20215 yr

5 minutes ago, Tucubanito07 said:

Any help is greatly appreciated.

Attach your supervisord log to your next post.

Quote

January 13, 20215 yr

3 minutes ago, wgstarks said:

Attach your supervisord log to your next post.

You can ignore. After a further look at the logs. I saw something that said bad AUTH. Checked my NordVPN and i placed the wrong user name. Sometimes is just the easiest things. Thank you.

Quote

January 13, 20215 yr

15 minutes ago, Tucubanito07 said:

You can ignore. After a further look at the logs. I saw something that said bad AUTH. Checked my NordVPN and i placed the wrong user name. Sometimes is just the easiest things. Thank you.

Glad you got it.👍

Quote

January 14, 20215 yr

Hi, I can no longer get sonar or radar to connect to deluge-vpn. When I test the connection I get a "Authentication Failed" error. All was working before 12/22. I have unraid auto-updating nightly so that's likely when it died. I can log in from a linux box with the deluge thin client running, Connects and is fully operational. The web interface runs but it doesn't really work. It's there, accepts logining in and all the buttons work, but most of the preferences are blank, changing any doesn't stick, it doesn't show any active torrents and won't actually add any torrents. The biggest problem is getting sonar and radar authenticated again. I copy paste the address that just worked to get me in the web interface (one I haven't ever changed). Not sure what all info y'all need to help. Sonar settings for deluge are stupid simple. IP address of unraid machine, port 8112 (deluge port) and password, which I'm certain is correct. Any ideas? Let me know if you need some info.

THANKS!

EDIT only thing interesting in the logs is SOMETIMES I can make this show up. But I think that's only when I was playing around with the web client and trying to make it connect to the localhost daemon...

2021-01-13 23:44:19,627 DEBG 'watchdog-script' stderr output:

Traceback (most recent call last):
Failure: deluge.error.NotAuthorizedError: Auth level too low: 0 < 5

Edited January 14, 20215 yr by nowhere99

Quote

January 14, 20215 yr

Just updated it and now I can't get back into the web GUI.

2021-01-14 02:28:30,286 DEBG 'watchdog-script' stdout output:
[info] Deluge listening interface IP 0.0.0.0 and VPN provider IP 10.xx.xxx.xx different, marking for reconfigure

2021-01-14 02:28:30,300 DEBG 'watchdog-script' stdout output:
[info] Privoxy not running

2021-01-14 02:28:30,301 DEBG 'watchdog-script' stdout output:
[info] Deluge incoming port 68xx and VPN incoming port 36xxx different, marking for reconfigure

2021-01-14 02:28:30,681 DEBG 'start-script' stdout output:
[info] Successfully assigned and bound incoming port '36xxx'

2021-01-14 02:43:31,366 DEBG 'start-script' stdout output:
[info] Successfully assigned and bound incoming port '36xxx'

This is the last thing in the log. I'm still on the test version/repo with PIA.

Edited January 14, 20215 yr by Excessiive

Quote

January 14, 20215 yr

hope this is a easy answer, my deluge was working fine last night then I updated it to the latest version and now I am not able to log into it.

image.png.e00f3192c27fa85e55b3cc9be1271bf1.png

I have check to see if I am still getting the VNP IP address which I am, so I now that my username and password are right. I have also tried it with the VPn turn off and I am getting the same results.

I have attached the log file from deluge in the hope that someone can see why I am not able to log in

deluge.txt

Quote

January 14, 20215 yr

Author

1 hour ago, Excessiive said:

I'm still on the test version/repo with PIA.

please switch back to 'latest', test is for exactly that, testing and is prone to breakage as i test new changes.

13 minutes ago, chris_netsmart said:

then I updated it to the latest version

as you saw an update yesterday im also assuming you are on test tagged version, switch back to latest.

Quote

January 14, 20215 yr

50 minutes ago, binhex said:

please switch back to 'latest', test is for exactly that, testing and is prone to breakage as i test new changes.

as you saw an update yesterday im also assuming you are on test tagged version, switch back to latest.

2021-01-14 05:00:49,590 DEBG 'start-script' stdout output:
[warn] Unable to download file from url 'http://209.222.18.222:2000/?client_id=5f940de0c51aba09b9205b3f3d33caacac3e8ea8a9090018b9ed1ef8c479d515', exiting script...
[warn] PIA VPN port assignment API currently down, terminating OpenVPN process to force retry for incoming port...

2021-01-14 05:02:33,816 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2021-01-14 05:02:33,817 INFO success: watchdog-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2021-01-14 05:02:33,897 DEBG 'start-script' stdout output:
[info] Default route for container is 172.17.0.1

2021-01-14 05:02:33,902 DEBG 'start-script' stdout output:
[info] Adding 209.222.18.222 to /etc/resolv.conf

2021-01-14 05:02:33,907 DEBG 'start-script' stdout output:
[info] Adding 84.200.69.80 to /etc/resolv.conf

2021-01-14 05:02:33,911 DEBG 'start-script' stdout output:
[info] Adding 37.235.1.174 to /etc/resolv.conf

2021-01-14 05:02:33,914 DEBG 'start-script' stdout output:
[info] Adding 1.1.1.1 to /etc/resolv.conf

2021-01-14 05:02:33,918 DEBG 'start-script' stdout output:
[info] Adding 209.222.18.218 to /etc/resolv.conf

2021-01-14 05:02:33,923 DEBG 'start-script' stdout output:
[info] Adding 37.235.1.177 to /etc/resolv.conf

2021-01-14 05:02:33,926 DEBG 'start-script' stdout output:
[info] Adding 84.200.70.40 to /etc/resolv.conf

2021-01-14 05:02:33,930 DEBG 'start-script' stdout output:
[info] Adding 1.0.0.1 to /etc/resolv.conf

2021-01-14 05:02:34,040 DEBG 'start-script' stdout output:
[info] Docker network defined as 172.17.0.0/16

2021-01-14 05:02:34,043 DEBG 'start-script' stdout output:
[info] Adding 10.10.20.0/24 as route via docker eth0

2021-01-14 05:02:34,044 DEBG 'start-script' stdout output:
[info] ip route defined as follows...
--------------------

2021-01-14 05:02:34,045 DEBG 'start-script' stdout output:
default via 172.17.0.1 dev eth0
10.10.20.0/24 via 172.17.0.1 dev eth0
172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.2

2021-01-14 05:02:34,046 DEBG 'start-script' stdout output:
--------------------

2021-01-14 05:02:34,048 DEBG 'start-script' stdout output:
iptable_mangle 16384 1
ip_tables 28672 3 iptable_filter,iptable_nat,iptable_mangle

2021-01-14 05:02:34,049 DEBG 'start-script' stdout output:
[info] iptable_mangle support detected, adding fwmark for tables

2021-01-14 05:02:34,461 DEBG 'start-script' stdout output:
[info] iptables defined as follows...
--------------------

2021-01-14 05:02:34,462 DEBG 'start-script' stdout output:
-P INPUT DROP
-P FORWARD DROP
-P OUTPUT DROP
-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 501 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 8112 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 8112 -j ACCEPT
-A INPUT -s 10.10.20.0/24 -i eth0 -p tcp -m tcp --dport 58846 -j ACCEPT
-A INPUT -s 10.10.20.0/24 -d 172.17.0.0/16 -i eth0 -p tcp -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i tun0 -j ACCEPT
-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 501 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 8112 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 8112 -j ACCEPT
-A OUTPUT -d 10.10.20.0/24 -o eth0 -p tcp -m tcp --sport 58846 -j ACCEPT
-A OUTPUT -s 172.17.0.0/16 -d 10.10.20.0/24 -o eth0 -p tcp -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT

2021-01-14 05:02:34,463 DEBG 'start-script' stdout output:
--------------------

2021-01-14 05:02:34,466 DEBG 'start-script' stdout output:
[info] Starting OpenVPN (non daemonised)...

2021-01-14 05:02:34,471 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:34 2021 WARNING: file 'credentials.conf' is group or others accessible

Thu Jan 14 05:02:34 2021 OpenVPN 2.4.9 [git:makepkg/9b0dafca6c50b8bb+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 20 2020
Thu Jan 14 05:02:34 2021 library versions: OpenSSL 1.1.1g 21 Apr 2020, LZO 2.10

2021-01-14 05:02:34,472 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:34 2021 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2021-01-14 05:02:34,473 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:34 2021 CRL: loaded 1 CRLs from file [[INLINE]]

2021-01-14 05:02:34,473 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:34 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]162.216.47.52:501

2021-01-14 05:02:34,473 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:34 2021 Attempting to establish TCP connection with [AF_INET]162.216.47.52:501 [nonblock]

2021-01-14 05:02:35,473 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:35 2021 TCP connection established with [AF_INET]162.216.47.52:501
Thu Jan 14 05:02:35 2021 TCP_CLIENT link local: (not bound)
Thu Jan 14 05:02:35 2021 TCP_CLIENT link remote: [AF_INET]162.216.47.52:501

2021-01-14 05:02:36,147 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:36 2021 [vancouver401] Peer Connection Initiated with [AF_INET]162.216.47.52:501

2021-01-14 05:02:37,576 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:37 2021 TUN/TAP device tun0 opened
Thu Jan 14 05:02:37 2021 /usr/bin/ip link set dev tun0 up mtu 1500

2021-01-14 05:02:37,577 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:37 2021 /usr/bin/ip addr add dev tun0 10.50.19.3/24 broadcast 10.50.19.255

2021-01-14 05:02:37,579 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:37 2021 /root/openvpnup.sh tun0 1500 1555 10.50.19.3 255.255.255.0 init

2021-01-14 05:02:37,586 DEBG 'start-script' stdout output:
Thu Jan 14 05:02:37 2021 Initialization Sequence Completed

2021-01-14 05:02:37,700 DEBG 'start-script' stdout output:
[info] Port forwarding is enabled
[info] Checking endpoint 'ca-vancouver.privacy.network' is port forward enabled...

2021-01-14 05:02:40,185 DEBG 'start-script' stdout output:
[warn] PIA endpoint 'ca-vancouver.privacy.network' is not in the list of endpoints that support port forwarding, DL/UL speeds maybe slow
[info] Please consider switching to one of the endpoints shown below

2021-01-14 05:02:40,186 DEBG 'start-script' stdout output:
[info] List of PIA endpoints that support port forwarding:-
[info] ca-toronto.privateinternetaccess.com
[info] ca-montreal.privateinternetaccess.com
[info] ca-vancouver.privateinternetaccess.com
[info] de-berlin.privateinternetaccess.com
[info] de-frankfurt.privateinternetaccess.com
[info] france.privateinternetaccess.com
[info] czech.privateinternetaccess.com
[info] spain.privateinternetaccess.com
[info] ro.privateinternetaccess.com
[info] israel.privateinternetaccess.com
[info] Attempting to get dynamically assigned port...

2021-01-14 05:02:40,526 DEBG 'start-script' stdout output:
[warn] Exit code '7' from curl != 0 or no response body received
[info] 12 retries left
[info] Retrying in 10 secs...

Back to getting these errors again which I think is what led to using the test version in the first place. I noticed the new server names are as noted in the log "location.privacy.network" rather than "location.privateinternetaccess.com". I'm not sure if that's what is causing the problem or if its something else.

Edited January 14, 20215 yr by Excessiive

Quote

January 14, 20215 yr

1 hour ago, binhex said:

please switch back to 'latest', test is for exactly that, testing and is prone to breakage as i test new changes.

as you saw an update yesterday im also assuming you are on test tagged version, switch back to latest.

thanks for your help. I don't know why I place the test tag in the template and now, I have return it back to lastest - it is all working fine.

Quote

January 14, 20215 yr

Author

9 hours ago, Excessiive said:

Back to getting these errors again which I think is what led to using the test version in the first place. I noticed the new server names are as noted in the log "location.privacy.network" rather than "location.privateinternetaccess.com". I'm not sure if that's what is causing the problem or if its something else.

you are running an out of date docker image, click on the 'force update' link or click on 'check for updates' button and then apply updates to update to the latest image.

Quote

January 14, 20215 yr

Hey Binhex. Quick question. I re-did this docker yesterday and got it to work, However, when deludge has completed downloading the file. Does it move the file or is Sonarr and Radarr that moves the file? I know this is not Sonarr or Radarr but wanted to see if Deludge is the one who perform this action?

Quote

January 14, 20215 yr

My docker doesn't restart but I keep getting an error and I cant open the webui.

Created by...

stdout