pfSense

As far as I can tell we've exhausted all the options. The routes are correct. the firewall rules allow the traffic. The addresses are not blocked by the sshguard or virusprot tables.

The client pfSense can reach all its local addresses, the server pfSense can reach the tunnel ip on the client, but nothing else on the client.

I have a shared-key P2P tunnel with the same version of pfSense that works perfectly with this setup. With this newly installed pfSense on a new server, it just does not work as expected, with the only configured difference being that the new one is using Peer-to-peer SSL/TLS instead of a shared key.

I will delete the whole machine and reinstall it all, create a new tunnel and then report back.