openvpn: firewall error

[obsy]

• server configured and enabled
• one or more client connected (this is important!)

After restarting firewall

root@Gargoyle:/# /etc/init.d/firewall stop Warning: Unable to locate ipset utility, disabling ipset support

• Flushing IPv4 filter table
• Flushing IPv4 nat table
• Flushing IPv4 mangle table
• Flushing IPv4 raw table
• Flushing IPv6 filter table
• Flushing IPv6 nat table
• Flushing IPv6 mangle table
• Flushing IPv6 raw table
• Flushing conntrack table ... root@Gargoyle:/# /etc/init.d/firewall start Warning: Unable to locate ipset utility, disabling ipset support
• Populating IPv4 filter table
  • Rule 'Allow-DHCP-Renew'
  • Rule 'Allow-Ping'
  • Rule 'Allow-IGMP'
  • Rule 'Allow-IPSec-ESP'
  • Rule 'Allow-ISAKMP'
  • Forward 'lan' -> 'wan'
  • Forward 'lan' -> 'vpn'
  • Forward 'vpn' -> 'wan'
  • Zone 'lan'
  • Zone 'wan'
  • Zone 'vpn'
• Populating IPv4 nat table
  • Zone 'lan'
  • Zone 'wan'
  • Zone 'vpn'
• Populating IPv4 mangle table
  • Zone 'lan'
  • Zone 'wan'
  • Zone 'vpn'
• Populating IPv4 raw table
  • Zone 'lan'
    • Using automatic conntrack helper attachment
  • Zone 'wan'
  • Zone 'vpn'
• Populating IPv6 filter table
  • Rule 'Allow-DHCPv6'
  • Rule 'Allow-MLD'
  • Rule 'Allow-ICMPv6-Input'
  • Rule 'Allow-ICMPv6-Forward'
  • Rule 'Allow-IPSec-ESP'
  • Rule 'Allow-ISAKMP'
  • Forward 'lan' -> 'wan'
  • Forward 'lan' -> 'vpn'
  • Forward 'vpn' -> 'wan'
  • Zone 'lan'
  • Zone 'wan'
  • Zone 'vpn'
• Populating IPv6 nat table Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_lan_rule' Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_lan_rule' Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_wan_rule' Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_wan_rule' Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_vpn_rule' Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_vpn_rule' Warning: fw3_ipt_rule_append(): Can't find target 'prerouting_rule' Warning: fw3_ipt_rule_append(): Can't find target 'postrouting_rule'
  • Zone 'lan'
  • Zone 'wan'
  • Zone 'vpn'
• Populating IPv6 mangle table
  • Zone 'lan'
  • Zone 'wan'
  • Zone 'vpn'
• Populating IPv6 raw table
  • Zone 'lan'
    • Using automatic conntrack helper attachment
  • Zone 'wan'
  • Zone 'vpn'
• Flushing conntrack table ...
• Set tcp_ecn to off
• Set tcp_syncookies to on
• Set tcp_window_scaling to on
• Running script '/etc/firewall.user'
• Running script '/usr/lib/gargoyle_firewall_util/gargoyle_additions.firewall'
• Running script '/etc/openvpn.firewall' iptables v1.8.3 (legacy): unknown protocol "tcp tcp" specified Try iptables -h' or 'iptables --help' for more information. iptables v1.8.3 (legacy): unknown protocol "tcp tcp" specified Tryiptables -h' or 'iptables --help' for more information.
• Running script '/etc/wireguard.firewall'

Problem with https://github.com/ericpaulbishop/gargoyle/blob/master/package/plugin-gargoyle-openvpn/files/etc/openvpn.firewall#L142 - if any client connected, this line returns more lines

root@Gargoyle:/# netstat -apn | grep openvpn
tcp        0      0 0.0.0.0:1194            0.0.0.0:*               LISTEN      5220/openvpn
tcp        0      0 192.168.1.1:1194        192.168.1.166:40646     ESTABLISHED 5220/openvpn
unix  2      [ ]         DGRAM                      6735 5220/openvpn        

Add uniq or head -1 or search for 0.0.0.0 etc.