SoftEther VPN User Forum

Hi, All:

Is there anyone had tried to use disable NAT-T feature ?
In my test case. All of server and client already are version v4.06-9433
my client can easy to connect to server by unselect Disable NAT-T.

but if select Disable NAT-T , the result will be fail. softether client will show me

Error (Error Code 1):
Connection to the server failed. Check network connection and make sure that address and port number of destination sever are correct.


I had tried to enable port accept by the iptables command, but the result is fail.
iptables -t nat -A WAN -p tcp --dport 992 -j ACCEPT
iptables -t nat -A WAN -p tcp --dport 1194 -j ACCEPT
iptables -t nat -A WAN -p tcp --dport 5555 -j ACCEPT

What is the steps that I am missing to do ?

arprip wrote:
> Hi, All:
>
> Is there anyone had tried to use disable NAT-T feature ?

I did, it works as intended.

> iptables -t nat -A WAN -p tcp --dport 992 -j ACCEPT
> iptables -t nat -A WAN -p tcp --dport 1194 -j ACCEPT
> iptables -t nat -A WAN -p tcp --dport 5555 -j ACCEPT

Where is port 443?

By default , there is 4 ports for softether vpnserver.

but I disable it because I need it for my web server

I don't use port 443 on softether vpnserver.

arprip wrote:
> By default , there is 4 ports for softether vpnserver.
>
> but I disable it because I need it for my web server
>
> I don't use port 443 on softether vpnserver.

put a screenshot of the client here.

I had modified client setting for my port 992 / 1194 / 5555

All of three settings are all result to fail by using Disable NAT-T feature.

Ignore everything I wrote before.

> arprip wrote:

> > iptables -t nat -A WAN -p tcp --dport 992 -j ACCEPT
> > iptables -t nat -A WAN -p tcp --dport 1194 -j ACCEPT
> > iptables -t nat -A WAN -p tcp --dport 5555 -j ACCEPT

You should allow "INPUT" chain, that's why you have a problem.

Thanks for the informations.

You are right, Put the command to wrong iptables chain.

After corrected, it work now.