[Support] activ - TransmissionVPN


Recommended Posts

  • 2 weeks later...

I recently upgraded to unRAID 6, and in doing so obviously lost all of my old plugins, including the Transmission one I created a couple of years ago that included OpenVPN support.

 

Rather than try and re-write my old plugin into a Docker, I thought I'd check to see if there already was a Transmission Docker that fit my needs, and sure enough, thanks to @active, there is!

 

The docker installed fine, and appears to connect to PIA using OpenVPN just like my old plugin did. I made a couple of changes like moving the

 

Unfortunately, once the Docker starts up, it appears to have no connection to the outside world. I'm not sure if this is a problem with the way that my network and firewall router are set up, or if it's a configuration issue in the Docker. Would someone be able to help me debug this?

 

The details of my network are:

 

unRAID server running on VLAN 20 in my network, with an IPv4 subnet of 172.16.20.0/24

NAT Router (Ubiquiti EdgeRouter Lite) has a zone based firewall set to allow all outgoing to WAN, and allow established and related in from WAN. I tried opening up the firewall on the input, but this didn't help at all.

 

I don't have any ports forwarded to the unRAID box currently, because I use a VPN to connect to the home network if I'm away and need access. I didn't need any ports forwarded with my Plugin before, but this is my thought on the most likely issue. Having said that, if all of the Transmission data is going over the OpenVPN link, there shouldn't be any need for local port forwarding I'd have thought?!?

 

Thanks in advance for any help!

Link to comment

Hey. First of all I can confirm that no portforwarding is needed.

 

Is it just connection to the internet that is not working? Can you access the web interface normally?

Are you sure the vpn is working?

 

What I usually do to troubleshoot is

a. Check the logs.

b. log into it as if it's a normal machine and see if I can figure out what the issue is inside docker.

 

It might also help to know that another IP is used inside the container which is then translated by docker (but when using a vpn into the container IS the local address for the vpn)

 

p.s. How do you like the Edgerouter? I'm thinking of getting some UBNT stuff too.

Link to comment

It's late now, and I'm getting tired, but I'll try and do some additional debugging over the weekend.

 

Regarding Ubiquiti... I had wanted to upgrade my WiFi for a while, because although I like the two Apple Airport Extremes that I had, I was having some odd behaviour switching between access points as I moved through the house, and neither of them supported 11ac. This need is what switched me on to Ubiquiti, because I'd heard their WiFi stuff was good.

 

To be honest, I also REALLY like learning new things, and had wanted to dabble with VLAN for a while, so an EdgeRouter Lite and at lease one UAP-AC-PRO were ordered, along with an Engenius POE switch (to power the AP), and a couple of Netgear low cost managed switch for other parts of my house.

 

It took quite a bit of time to set it all up, though simply replacing the AirPort Extreme Router functionality was very quick indeed, the firewall, VLAN and IPv6 stuff took a bit longer. Having said that though, maybe I'm crazy but I found it so much fun, and now that it's all done, I'm itching to do something similar and am looking doing an IP camera setup around our housing community!

 

In summary, the Ubiquiti stuff has been great. A single UAP-AC-PRO has replaced two Airport Extremes and I get better coverage throughout my (3-floor town) house, and the EdgeRouter feels faster than the AirPort Extreme whilst providing me with greater functionality. I'd say go for it, but maybe get the EdgeRouter POE rather than the EdgeRouter Lite.

Link to comment

unRAID server running on VLAN 20 in my network, with an IPv4 subnet of 172.16.20.0/24

NAT Router (Ubiquiti EdgeRouter Lite) has a zone based firewall set to allow all outgoing to WAN, and allow established and related in from WAN. I tried opening up the firewall on the input, but this didn't help at all.

 

I don't have any ports forwarded to the unRAID box currently, because I use a VPN to connect to the home network if I'm away and need access. I didn't need any ports forwarded with my Plugin before, but this is my thought on the most likely issue. Having said that, if all of the Transmission data is going over the OpenVPN link, there shouldn't be any need for local port forwarding I'd have thought?!?

 

Thanks in advance for any help!

I am running Binhex delugeVPN (which this one is based on) with an edgerouter. I did use the wizard to set it up initially, and I have not needed to port forward anything for that docker, or doing something spesial.

 

Does this require upnp to work btw? There is an issue with 1.9.0 with that on the edgerouter.

 

 

I am running full Ubiquiti setup home, and are very happy with it.

2 Unifi AP AC Pro, 1 Edgerouter Lite and 1 Edgeswitch 16 Poe.

Link to comment

UPNP is not required when used with a VPN (as no ports have to be opened).

 

Sounds like a nice setup. I an thinking I'll go with full Unifi, otherwise it would annoy the blip out of me that not all features in the controller software are available to me. I hate greyed out menu items (a bit ocd, I know).

Link to comment

UPNP is not required when used with a VPN (as no ports have to be opened).

 

Sounds like a nice setup. I an thinking I'll go with full Unifi, otherwise it would annoy the blip out of me that not all features in the controller software are available to me. I hate greyed out menu items (a bit ocd, I know).

haha  ;D

 

I prefer the features on edgerouter over having the green menu items, and the integration.

But the UniFi router has been a lot better since I bought my edgerouter, but still not as good as the edgerouter.

Link to comment

@activ,

 

I removed and re-created a new Docker, and everything is working great.

 

I didn't spend much time debugging the previous instance of the Docker, so I'm not sure what I'd done to mess it up there, but the important thing is that the new one is working so I'm happy.

 

Thanks for the work creating it!

 

I prefer the features on edgerouter over having the green menu items, and the integration.

But the UniFi router has been a lot better since I bought my edgerouter, but still not as good as the edgerouter.

 

Me too, though I do admit that the UniFi controller UI Dashboard pane does look disappointingly empty without any swithes or routers in it. How often do you look at that though, once it's up and running...

Link to comment
  • 1 month later...
  • 3 weeks later...

Having an issue and haven't see a solution. I added the docker, added my VPN info, all appears fine, but I constantly get warnings about "Cannot connect to tracker". Example below. Removed the name of the torrent and replaced with ****.

 

[2016-11-21 12:33:01.295] **** Retrying announce in 1809 seconds. (announcer.c:1005)

[2016-11-21 12:33:01.295] **** Connection failed (announcer.c:996)

 

after several attempts, I then get this error:

 

2016-11-21 12:25:31,294 DEBG 'deluge-script' stderr output:

[2016-11-21 12:25:31.294] **** Scrape error: Could not connect to tracker (announcer.c:1279)

 

The log before it starts trying to download looks find to me, no warnings or errors, but I am horrible with routing, so perhaps something is off.

 

usermod: no changes
[info] Env var PUID defined as 99
[info] Env var PGID defined as 100
[info] Permissions already set for /config
[info] Starting Supervisor...
2016-11-21 12:24:09,905 CRIT Set uid to user 0
2016-11-21 12:24:09,905 WARN Included extra file "/etc/supervisor/conf.d/delugevpn.conf" during parsing
2016-11-21 12:24:09,909 INFO supervisord started with pid 27
2016-11-21 12:24:10,912 INFO spawned: 'start-script' with pid 30
2016-11-21 12:24:10,913 INFO spawned: 'deluge-script' with pid 31
2016-11-21 12:24:10,915 INFO spawned: 'privoxy-script' with pid 32
2016-11-21 12:24:10,922 DEBG 'deluge-script' stdout output:
[info] VPN is enabled, checking VPN tunnel local ip is valid

2016-11-21 12:24:10,922 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-11-21 12:24:10,922 INFO success: deluge-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-11-21 12:24:10,922 INFO success: privoxy-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-11-21 12:24:10,925 DEBG 'start-script' stdout output:
[info] VPN is enabled, beginning configuration of VPN

2016-11-21 12:24:10,926 DEBG 'privoxy-script' stdout output:
[info] VPN is enabled, checking VPN tunnel local ip is valid

2016-11-21 12:24:10,935 DEBG 'start-script' stdout output:
[info] VPN provider defined as pia
[info] VPN config file (ovpn extension) is located at /config/openvpn/openvpn.ovpn

2016-11-21 12:24:10,937 DEBG 'start-script' stdout output:
[info] Env vars defined via docker -e flags for remote host, port and protocol, writing values to ovpn file...

2016-11-21 12:24:10,954 DEBG 'start-script' stdout output:
[info] VPN provider remote gateway defined as 104.200.154.4
[info] VPN provider remote port defined as 1198
[info] VPN provider remote protocol defined as udp

2016-11-21 12:24:10,961 DEBG 'start-script' stdout output:
[info] VPN provider username defined as ****

2016-11-21 12:24:10,970 DEBG 'start-script' stdout output:
[info] VPN provider password defined as ****

2016-11-21 12:24:10,987 DEBG 'start-script' stdout output:
[info] Default route for container is 172.17.0.1

2016-11-21 12:24:10,996 DEBG 'start-script' stdout output:
[info] Setting permissions recursively on /config/openvpn...

2016-11-21 12:24:10,998 DEBG 'start-script' stdout output:
[info] Adding 192.168.1.0/24 as route via docker eth0

2016-11-21 12:24:10,999 DEBG 'start-script' stdout output:
[info] ip route defined as follows...
--------------------

2016-11-21 12:24:11,000 DEBG 'start-script' stdout output:
default via 172.17.0.1 dev eth0

2016-11-21 12:24:11,000 DEBG 'start-script' stdout output:
172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.2
192.168.1.0/24 via 172.17.0.1 dev eth0

2016-11-21 12:24:11,000 DEBG 'start-script' stdout output:
--------------------

2016-11-21 12:24:11,005 DEBG 'start-script' stdout output:
[info] iptable_mangle support detected, adding fwmark for tables

2016-11-21 12:24:11,034 DEBG 'start-script' stdout output:
[info] iptables defined as follows...
--------------------

2016-11-21 12:24:11,036 DEBG 'start-script' stdout output:
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT DROP
-A INPUT -i tun0 -j ACCEPT
-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 1198 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 9091 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 9091 -j ACCEPT
-A INPUT -p udp -m udp --sport 53 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 1198 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 9091 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 9091 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT

2016-11-21 12:24:11,036 DEBG 'start-script' stdout output:
--------------------
[info] nameservers

2016-11-21 12:24:11,037 DEBG 'start-script' stdout output:
nameserver 8.8.8.8
nameserver 8.8.4.4

2016-11-21 12:24:11,037 DEBG 'start-script' stdout output:
--------------------
[info] Starting OpenVPN...

2016-11-21 12:24:11,044 DEBG 'start-script' stdout output:
Mon Nov 21 12:24:11 2016 OpenVPN 2.3.9 x86_64-unknown-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [MH] [iPv6] built on Dec 24 2015
Mon Nov 21 12:24:11 2016 library versions: OpenSSL 1.0.2f 28 Jan 2016, LZO 2.09
Mon Nov 21 12:24:11 2016 WARNING: file 'credentials.conf' is group or others accessible


2016-11-21 12:24:11,045 DEBG 'start-script' stdout output:
Mon Nov 21 12:24:11 2016 UDPv4 link local: [undef]
Mon Nov 21 12:24:11 2016 UDPv4 link remote: [AF_INET]104.200.154.4:1198

2016-11-21 12:24:11,058 DEBG 'start-script' stdout output:
Mon Nov 21 12:24:11 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this


2016-11-21 12:24:11,123 DEBG 'start-script' stdout output:
Mon Nov 21 12:24:11 2016 [2136bcaeca1eddd771c929559cfff859] Peer Connection Initiated with [AF_INET]104.200.154.4:1198

2016-11-21 12:24:13,517 DEBG 'start-script' stdout output:
Mon Nov 21 12:24:13 2016 TUN/TAP device tun0 opened
Mon Nov 21 12:24:13 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Nov 21 12:24:13 2016 /usr/bin/ip link set dev tun0 up mtu 1500

2016-11-21 12:24:13,518 DEBG 'start-script' stdout output:
Mon Nov 21 12:24:13 2016 /usr/bin/ip addr add dev tun0 local 10.2.10.10 peer 10.2.10.9

2016-11-21 12:24:13,522 DEBG 'start-script' stdout output:
Mon Nov 21 12:24:13 2016 Initialization Sequence Completed

2016-11-21 12:24:13,554 DEBG 'privoxy-script' stdout output:
[info] Privoxy set to disabled

2016-11-21 12:24:13,554 DEBG fd 19 closed, stopped monitoring <POutputDispatcher at 47251779778752 for <Subprocess at 47251779714224 with name privoxy-script in state RUNNING> (stderr)>
2016-11-21 12:24:13,554 DEBG fd 15 closed, stopped monitoring <POutputDispatcher at 47251779711776 for <Subprocess at 47251779714224 with name privoxy-script in state RUNNING> (stdout)>
2016-11-21 12:24:13,554 INFO exited: privoxy-script (exit status 0; expected)
2016-11-21 12:24:13,554 DEBG received SIGCLD indicating a child quit
2016-11-21 12:24:13,558 DEBG 'deluge-script' stdout output:
[info] First run detected, setting Transmission listening interface 10.2.10.10

2016-11-21 12:24:14,039 DEBG 'deluge-script' stdout output:
[info] First run detected, setting transmission incoming port

2016-11-21 12:24:14,039 DEBG 'deluge-script' stdout output:
[warn] PIA incoming port is not an integer, downloads will be slow, does PIA remote gateway supports port forwarding?
[info] All checks complete, starting transmission...

2016-11-21 12:24:15,294 DEBG 'deluge-script' stderr output:
[2016-11-21 12:24:15.293] Transmission 2.92 (14714) started (session.c:738)
[2016-11-21 12:24:15.294] RPC Server Adding address to whitelist: 192.168.1.* (rpc-server.c:903)
[2016-11-21 12:24:15.294] RPC Server Serving RPC and Web requests on port 127.0.0.1:9091/transmission/ (rpc-server.c:1110)
[2016-11-21 12:24:15.294] RPC Server Whitelist enabled (rpc-server.c:1114)
[2016-11-21 12:24:15.294] Using settings from "/config" (daemon.c:528)
[2016-11-21 12:24:15.294] Saved "/config/settings.json" (variant.c:1266)
[2016-11-21 12:24:15.294] Loaded 4 torrents (session.c:2032)
[2016-11-21 12:24:15.294] Port Forwarding (NAT-PMP) initnatpmp succeeded (0) (natpmp.c:70)
[2016-11-21 12:24:15.294] Port Forwarding (NAT-PMP) sendpublicaddressrequest succeeded (2) (natpmp.c:70)

log.txt

Link to comment

It does seem fine at first glance. Could you try downloading something like Ubuntu or something?

Maybe the tracker is blocking vpn's.

 

Also: I've had cases where this happened with very new torrents, just leaving it and checking after a few hours solved it.

Link to comment

It does seem fine at first glance. Could you try downloading something like Ubuntu or something?

Maybe the tracker is blocking vpn's.

 

Also: I've had cases where this happened with very new torrents, just leaving it and checking after a few hours solved it.

 

gave this a try and got the same results. Just using PIA, so not sure why its not working here, seems to work fine on my desktop using their client:

 

2016-11-22 08:15:02,220 DEBG 'deluge-script' stderr output:
[2016-11-22 08:15:02.220] Saved "/config/torrents/ubuntu-16.10-desktop-amd64.iso.0403fb4728bd788f.torrent" (variant.c:1266)
[2016-11-22 08:15:02.220] ubuntu-16.10-desktop-amd64.iso Queued for verification (verify.c:269)
[2016-11-22 08:15:02.220] ubuntu-16.10-desktop-amd64.iso Verifying torrent (verify.c:224)

2016-11-22 08:15:03,220 DEBG 'deluge-script' stderr output:
[2016-11-22 08:15:03.220] ubuntu-16.10-desktop-amd64.iso Could not connect to tracker (announcer.c:996)
[2016-11-22 08:15:03.220] ubuntu-16.10-desktop-amd64.iso Retrying announce in 20 seconds. (announcer.c:1005)

Link to comment

Hey, i also just upgraded from 5.0.5 to the latest release and just installed your docker.

 

Mostly working, i'm just not sure how to setup the watch folder. I have a script that moves files into the watch folder after i download them. I'm assuming you need to add a Path to the container through the settings but am not sure what to actually call it.

 

I also like to have an "Incomplete" folder where stuff is downloaded, and it is then moved to the main folder when done, can that be setup?

 

Thanks!

Link to comment

All of what you want is easily done. I don't use a watch folder myself, but do use an incomplete folder.

I've added a folder data to the container below which I've made sub folders for complete and incomplete. I find that easier than adding lots of folder separately.

Link to comment

You can specify the uid and guid to use inside the container, default is 99 and 100 I believe. You will need to change that or assign rights to that user/group. It's a bit of a tricky affair, but once you get the idea you will never have the problem again.

 

Link to comment

Thanks for the info. I made a mistake, I didn't properly have the folders set in transmission. I just had /Complete instead of /data/Complete. Still learning. Thanks for the app.

 

Edit: Also, any info on how to get Couchpotato to connect to Transmission? I know deluge has an auth file with username and password. Any ideas or help would be appreciated.

 

Thanks

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.