[SOLVED] Psiphon not working with DD-WRT?

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
Golpesar
DD-WRT Novice


Joined: 19 Apr 2022
Posts: 7

PostPosted: Sun Feb 08, 2026 13:15    Post subject: [SOLVED] Psiphon not working with DD-WRT? Reply with quote
Hi dear friends,
I use Psiphon as a VPN.
The software works well when the router is powered by OpenWRT.
However, the same version and the same device cannot connect when the router is powered by DD-WRT.

Would you please help me understand if there is any concept I am missing?

Both routers are using an ADSL modem to private internet for users.

Thanks in advance.
Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 7112
Location: UK, London, just across the river..

PostPosted: Sun Feb 08, 2026 14:12    Post subject: Reply with quote
well..as you may believe...more details are needed...
otherwise there is no idea why... Razz

router model, build number running, OpenVPN set up...cover the private details...pic's will tell a better story..

also did you follow the OpenVPN guide from Advanced Networking sticky's

finally OpenVPN debug log will expose the verbose detail..add verb 6 to advanced vpn commands box and post the output...along with pics and ect.

_________________
Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 -DD-WRT 63600 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 62606 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 62606 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 62606
Broadcom
Netgear R7000 --DD-WRT 63790 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 7130
Location: Romerike, Norway

PostPosted: Sun Feb 08, 2026 15:25    Post subject: Reply with quote
Have you Enabled IPsec/L2TP pass-through?
Golpesar
DD-WRT Novice


Joined: 19 Apr 2022
Posts: 7

PostPosted: Sun Feb 08, 2026 15:50    Post subject: Reply with quote
Thanks for your kind and prompt reply.
I have no access to the router now.
But I will collect some useful information and send here.

However, I have no OpenVPN config on the router.
I will check if the IPsec/L2TP pass-through is set.
Where should I find this option?

Regards,
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 16808
Location: Texas, USA

PostPosted: Sun Feb 08, 2026 23:16    Post subject: Reply with quote
Security -> VPN Passthrough tab. And I absolutely love how some folks don't understand that Psiphon is a client app and want to point to another feature (OpenVPN).
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 7112
Location: UK, London, just across the river..

PostPosted: Mon Feb 09, 2026 6:07    Post subject: Reply with quote
kernel-panic69 wrote:
Security -> VPN Passthrough tab. And I absolutely love how some folks don't understand that Psiphon is a client app and want to point to another feature (OpenVPN).


yep true so, true...i missed that by miles Cool .... and you didn't miss your bit...indeed Laughing

_________________
Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 -DD-WRT 63600 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 62606 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 62606 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 62606
Broadcom
Netgear R7000 --DD-WRT 63790 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Golpesar
DD-WRT Novice


Joined: 19 Apr 2022
Posts: 7

PostPosted: Wed Feb 11, 2026 20:46    Post subject: Reply with quote
Hi dear friends,

I had a chat with chatgpt regarding this issue. Interestingly, it resolved the issue. Now I am writing and using Psiphon via dd-wrt.
I asked for a technical detail and it provided me with the following:


Title: Psiphon Does Not Work Behind DD-WRT (Wireless Station Mode) – Fixed by Adjusting MTU and Firewall Filters

Hello everyone,

I want to share a networking issue I had and the solution, in case it helps others.

Network Setup:

Main router: OpenWRT

Two downstream routers

Both downstream routers connect wirelessly to the main router (Wireless Station mode)

Both then redistribute internet wirelessly to clients

One downstream router runs OpenWRT

The other downstream router runs DD-WRT

The Problem:

Psiphon works perfectly behind the OpenWRT downstream router.

However, behind the DD-WRT downstream router, Psiphon would not connect. It would hang indefinitely.

Root Cause Analysis

Since Psiphon worked behind OpenWRT but not DD-WRT, the issue was clearly configuration-related on the DD-WRT side.

Psiphon uses:

HTTPS tunnels (port 443)

SSH tunnels (port 22)

Obfuscated traffic

Long-lived TCP sessions

Sometimes UDP/QUIC

These are sensitive to:

MTU mismatches

Fragmentation

Deep packet inspection

Certain firewall filters

In wireless station + double NAT environments, MTU issues are very common.

What Fixed the Problem (DD-WRT)

I did NOT disable the full SPI firewall.

The issue was solved by:

Disabling only these two firewall filters:

Security → Firewall

Filter Multicast → Disabled

Filter IDENT (Port 113) → Disabled

SPI Firewall itself remained enabled.

Manually setting MTU to 1400

Setup → Basic Setup

MTU → Manual

Value → 1400

After these two changes, Psiphon connected immediately and worked normally.

Again thank you.
And of course thank you chatgpt.
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 16808
Location: Texas, USA

PostPosted: Wed Feb 11, 2026 21:52    Post subject: Reply with quote
Thanks for the update. Glad you found a solution.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum