mirror of
https://github.com/hwdsl2/docker-ipsec-vpn-server.git
synced 2026-04-26 18:15:50 +03:00
[GH-ISSUE #174] Unable to Ping other containers after setting DNS #161
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ztj1993 on GitHub (Feb 25, 2020).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/174
I've set up DNS, but I still can't Ping other containers. In the same network environment, you can ping by entering the shell.
How to configure this situation?
@hwdsl2 commented on GitHub (Apr 12, 2020):
@ztj1993 Hello! This is restricted by the IPTables FORWARD rules in
run.sh. If you build your own customized version of this Docker image, refer to [1] for examples on which IPTables rules to add in order to allow traffic to your subnet.[1] https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#access-vpn-servers-subnet
@TheAnachronism commented on GitHub (Apr 26, 2021):
What are those rules? The section mentioned in your link doesn't exist anymore.
@hwdsl2 commented on GitHub (Apr 27, 2021):
@TheAnachronism Hello! You can find the rules here [1]. This section was removed because I discovered in my tests that accessing the VPN server's subnet works out of the box without adding those rules, assuming that the user sets up the VPN directly without using Docker.
On the other hand, due to Docker's network isolation among containers, it is difficult to reach other containers from a VPN client while connected to the VPN. You can give the rules a try, but it may not help in your use case.
[1]
github.com/hwdsl2/setup-ipsec-vpn@ca6bf9818d/docs/clients.md (access-vpn-servers-subnet)