This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

POP3 proxy does not work with VPN

Hi,

I realized that the POP3 proxy does not work at all when I am connected to an OpenVPN server.

I tried to put the IP (which is in the 10.4.0.0/16 range) which the TAP adapter gets through OpenVPN into the list.

But this also doesn't work. Any hints on this or is this just not possible?

CHeers


This thread was automatically locked due to age.
Parents
  • The traffic in the tunnel is encrypted between your PC and the OpenVPN server, so the UTM can't do anything other than allow the tunnel or block it.  Your 'Internal (Network) -> OpenVPN server' rule allows the tunnel to pass.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • The traffic in the tunnel is encrypted between your PC and the OpenVPN server, so the UTM can't do anything other than allow the tunnel or block it.  Your 'Internal (Network) -> OpenVPN server' rule allows the tunnel to pass.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • The traffic in the tunnel is encrypted between your PC and the OpenVPN server, so the UTM can't do anything other than allow the tunnel or block it.  Your 'Internal (Network) -> OpenVPN server' rule allows the tunnel to pass.

    Cheers - Bob


    I know that but where is the rule that allows the traffic from 10.4.x.x. to the outside world?? Is this handled through OpenVPN software in the tunnel?

    Because my traffic is only between Internal -> OpenVPN server but HTTP traffic for instance is handled through 10.4.x.x (TAP-Adapter) -> Any.
    You can see this clearly with wireshark and this is exactly why you do VPN connections.

    I just wanted an explanation for that.