<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 11pt; font-family: Tahoma,Arial,Helvetica,sans-serif'>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Hi Paul</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Double checked this, rp_filter is disabled on all interfaces and ipv4 forwarding is enabled. I use "nftables" on both ends and have double checked to rules to ensure packets from both these sites have bi-directional traffic enabled. In fact to rule out nftables, I flushed all rules at both ends briefly for a min and tried to reach each other, but there's no change in status.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Thanks, best</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">BA</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"><br /><br />On 2023-02-03 20:58, Paul Wouters wrote:
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">On Fri, 3 Feb 2023, <a href="mailto:ud@blueaquan.com">ud@blueaquan.com</a> wrote:<br /><br />
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">Also, an observation I could make is, when the machine at Site Office tries to reach the HO VPN server,<br />even though the ping does not happen, I can see the traffic go up incrementally on both sides. <br />However when the HO tries to reach the Site Office, traffic from HO goes out and likewise the In traffic<br />at Site Office also goes up incrementally, but there is no Out traffic from Site Office. Attaching the<br />observation FYI. Any thoughts...?</blockquote>
<br />In that case, perhaps the traffic is just getting filtered. Try logging<br />all iptables DROP rules and also ensure rp_filter is truly disabled on<br />all interfaces. And that forwarding is properly allowed.<br /><br />Paul</blockquote>
</div>
</body></html>