Bug: (likely user error) protonvpn wireguard port forwarding up command `connection refused`

[BombasticBooger]

Is this urgent?

Yes

Host OS

CachyOS

CPU arch

x86_64

VPN service provider

ProtonVPN

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2026-05-21T18:39:34.738Z (commit 1a25f73)

What's the problem 🤔

VPN doesn't work and doesn't STDOUT after time passed, staying at the dns leak report section. If using the vpn port forwarding up command, it just can't port forward. Have tried using older PRs and it doesn't seem to fix for some reason, though I haven't tried very old PRs

Share your logs (at least 10 lines)

WITH PORT FORWARDING UP:

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================
Running version latest built on 2026-05-21T18:39:34.738Z (commit 1a25f73) on Linux 7.0.9-1-cachyos (x86_64)
📣 Your servers data files are now migrated to /gluetun/servers/
🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2026-05-23T11:48:59Z INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2026-05-23T11:48:59Z INFO [routing] local ethernet link found: eth0
2026-05-23T11:48:59Z INFO [routing] local ipnet found: 172.19.0.0/16
2026-05-23T11:48:59Z INFO [firewall] enabling...
2026-05-23T11:48:59Z INFO [firewall] enabled successfully
2026-05-23T11:48:59Z INFO [storage] writing servers data files to /gluetun/servers/ with 27405 hardcoded servers
2026-05-23T11:48:59Z INFO Alpine version: 3.23.4
2026-05-23T11:48:59Z INFO OpenVPN version: 2.6.20
2026-05-23T11:48:59Z INFO Firewall version: iptables v1.8.11
2026-05-23T11:48:59Z INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: protonvpn
|   |   ├── Server selection settings:
|   |   |   ├── VPN type: wireguard
|   |   |   ├── Countries: korea, japan
|   |   |   ├── Port forwarding only servers: yes
|   |   |   └── Wireguard selection settings:
|   |   └── Automatic port forwarding settings:
|   |       ├── Number of ports to be forwarded: 1
|   |       ├── Use port forwarding code for current provider
|   |       ├── Forwarded port file path: /tmp/gluetun/forwarded_port
|   |       ├── Forwarded port up command: /bin/sh -c 'wget -O- -nv --retry-connrefused --post-data "json={\"listen_port\":{{PORT}},\"current_network_interface\":\"{{VPN_INTERFACE}}\",\"random_port\":false,\"upnp\":false}" http://127.0.0.1:8080/api/v2/app/setPreferences'
|   |       └── Forwarded port down command: /bin/sh -c 'wget -O- -nv --retry-connrefused --post-data "json={\"listen_port\":0,\"current_network_interface\":\"lo\"}" http://127.0.0.1:8080/api/v2/app/setPreferences'
|   ├── Wireguard settings:
|   |   ├── Private key: sJ1...mg=
|   |   ├── Interface addresses:
|   |   |   └── 10.2.0.2/32
|   |   ├── Allowed IPs:
|   |   |   ├── 0.0.0.0/0
|   |   |   └── ::/0
|   |   └── Network interface: tun0
|   |       └── MTU: use path MTU discovery
|   └── Path MTU discovery:
|       ├── ICMP addresses:
|       |   ├── 1.1.1.1
|       |   └── 8.8.8.8
|       └── TCP addresses:
|           ├── 1.1.1.1:443
|           ├── 8.8.8.8:443
|           ├── 1.1.1.1:53
|           ├── 8.8.8.8:53
|           ├── [2606:4700:4700::1111]:53
|           ├── [2001:4860:4860::8888]:53
|           ├── [2606:4700:4700::1111]:443
|           └── [2001:4860:4860::8888]:443
├── DNS settings:
|   ├── Upstream resolver type: dot
|   ├── Upstream resolvers:
|   |   └── Cloudflare
|   ├── Caching: yes
|   ├── IPv6: no
|   ├── Update period: every 24h0m0s
|   └── DNS filtering settings:
|       ├── Block malicious: yes
|       ├── Block ads: no
|       └── Block surveillance: no
├── Firewall settings:
|   ├── Enabled: yes
|   └── Iptables settings:
|       └── Log level: info
├── Log settings:
|   └── Log level: info
├── IPv6 settings:
|   └── Check addresses:
|       ├── [2001:4860:4860::8888]:53
|       └── [2606:4700:4700::1111]:53
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target addresses:
|   |   ├── cloudflare.com:443
|   |   └── github.com:443
|   ├── Small health check type: ICMP echo request
|   |   └── ICMP target IPs:
|   |       ├── 1.1.1.1
|   |       └── 8.8.8.8
|   └── Restart VPN on healthcheck failure: yes
├── SOCKS5 proxy server settings:
|   └── Enabled: no
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   ├── Logging: yes
|   └── Authentication file path: /gluetun/auth/config.toml
├── Storage settings:
|   └── Servers directory path: /gluetun/servers/
├── OS Alpine settings:
|   ├── Process UID: 1000
|   └── Process GID: 1000
├── Public IP settings:
|   ├── IP file path: /tmp/gluetun/ip
|   ├── Public IP data base API: ipinfo
|   └── Public IP data backup APIs:
|       ├── ifconfigco
|       ├── ip2location
|       └── cloudflare
├── Server data updater settings:
|   ├── Update period: 12h0m0s
|   ├── Minimum ratio: 0.8
|   ├── Providers to update: protonvpn
|   ├── Prefer direct download: no
|   ├── Proton API email: 
|   └── Proton API password: [not set]
├── Version settings:
|   └── Enabled: yes
└── Boring-poll settings:
    └── gluetun.com: on
2026-05-23T11:48:59Z INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2026-05-23T11:48:59Z INFO [routing] adding route for 0.0.0.0/0
2026-05-23T11:48:59Z INFO [firewall] setting allowed subnets...
2026-05-23T11:48:59Z INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2026-05-23T11:48:59Z INFO [boring poll] gluetun.com is DOWN most likely thanks to you! so not doing anything anymore
2026-05-23T11:48:59Z INFO [healthcheck] listening on 127.0.0.1:9999
2026-05-23T11:48:59Z INFO [http server] http server listening on [::]:8000
2026-05-23T11:48:59Z INFO [firewall] allowing VPN connection...
2026-05-23T11:48:59Z INFO [wireguard] Using available kernelspace implementation
2026-05-23T11:48:59Z INFO [wireguard] Connecting to 138.199.21.214:51820
2026-05-23T11:48:59Z INFO [vpn] wireguard setup is complete. Note wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the wireguard connection is not working.
2026-05-23T11:48:59Z INFO [MTU discovery] finding maximum MTU, this can take up to 6 seconds
2026-05-23T11:49:04Z INFO [MTU discovery] setting VPN interface tun0 MTU to maximum valid MTU 1400
2026-05-23T11:49:04Z INFO [dns] DNS server listening on [::]:53
2026-05-23T11:49:04Z INFO [dns] ready and using DNS server with dot upstream resolvers
2026-05-23T11:49:04Z INFO [dns] downloading hostnames and IP block lists
2026-05-23T11:49:07Z INFO [ip getter] Public IP address is 159.26.119.36 (Japan, Tokyo, Tokyo - source: ipinfo+ifconfig.co+ip2location+cloudflare)
2026-05-23T11:49:07Z INFO [vpn] You are running 1 commit behind the most recent latest
2026-05-23T11:49:07Z INFO [port forwarding] starting
2026-05-23T11:49:07Z INFO [port forwarding] port forwarded is 55663 (internal port 56789)
2026-05-23T11:49:07Z INFO [firewall] setting allowed input port 56789 through interface tun0...
2026-05-23T11:49:07Z INFO [port forwarding] writing port file /tmp/gluetun/forwarded_port
2026-05-23T11:49:07Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:08Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:10Z INFO [dns] leak check report: 162.159.109.41 (33%), 162.159.111.42 (22%), 172.71.208.43 (22%), 172.64.212.40 (11%), 172.64.214.43 (7%), 172.68.41.44 (7%)
2026-05-23T11:49:10Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:13Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:17Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:22Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:28Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:35Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:43Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:49:52Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:50:02Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:50:12Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:50:22Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:50:32Z ERROR [port forwarding] failed: Connection refused.
2026-05-23T11:50:42Z ERROR [port forwarding] failed: Connection refused.

WITHOUT IT:

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================
Running version latest built on 2026-05-21T18:39:34.738Z (commit 1a25f73) on Linux 7.0.9-1-cachyos (x86_64)
📣 Your servers data files are now migrated to /gluetun/servers/
🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2026-05-23T11:51:45Z INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2026-05-23T11:51:45Z INFO [routing] local ethernet link found: eth0
2026-05-23T11:51:45Z INFO [routing] local ipnet found: 172.19.0.0/16
2026-05-23T11:51:45Z INFO [firewall] enabling...
2026-05-23T11:51:45Z INFO [firewall] enabled successfully
2026-05-23T11:51:45Z INFO [storage] writing servers data files to /gluetun/servers/ with 27405 hardcoded servers
2026-05-23T11:51:45Z INFO Alpine version: 3.23.4
2026-05-23T11:51:45Z INFO OpenVPN version: 2.6.20
2026-05-23T11:51:45Z INFO Firewall version: iptables v1.8.11
2026-05-23T11:51:45Z INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: protonvpn
|   |   ├── Server selection settings:
|   |   |   ├── VPN type: wireguard
|   |   |   ├── Countries: korea, japan
|   |   |   ├── Port forwarding only servers: yes
|   |   |   └── Wireguard selection settings:
|   |   └── Automatic port forwarding settings:
|   |       ├── Number of ports to be forwarded: 1
|   |       ├── Use port forwarding code for current provider
|   |       └── Forwarded port file path: /tmp/gluetun/forwarded_port
|   ├── Wireguard settings:
|   |   ├── Private key: sJ1...mg=
|   |   ├── Interface addresses:
|   |   |   └── 10.2.0.2/32
|   |   ├── Allowed IPs:
|   |   |   ├── 0.0.0.0/0
|   |   |   └── ::/0
|   |   └── Network interface: tun0
|   |       └── MTU: use path MTU discovery
|   └── Path MTU discovery:
|       ├── ICMP addresses:
|       |   ├── 1.1.1.1
|       |   └── 8.8.8.8
|       └── TCP addresses:
|           ├── 1.1.1.1:443
|           ├── 8.8.8.8:443
|           ├── 1.1.1.1:53
|           ├── 8.8.8.8:53
|           ├── [2606:4700:4700::1111]:53
|           ├── [2001:4860:4860::8888]:53
|           ├── [2606:4700:4700::1111]:443
|           └── [2001:4860:4860::8888]:443
├── DNS settings:
|   ├── Upstream resolver type: dot
|   ├── Upstream resolvers:
|   |   └── Cloudflare
|   ├── Caching: yes
|   ├── IPv6: no
|   ├── Update period: every 24h0m0s
|   └── DNS filtering settings:
|       ├── Block malicious: yes
|       ├── Block ads: no
|       └── Block surveillance: no
├── Firewall settings:
|   ├── Enabled: yes
|   └── Iptables settings:
|       └── Log level: info
├── Log settings:
|   └── Log level: info
├── IPv6 settings:
|   └── Check addresses:
|       ├── [2001:4860:4860::8888]:53
|       └── [2606:4700:4700::1111]:53
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target addresses:
|   |   ├── cloudflare.com:443
|   |   └── github.com:443
|   ├── Small health check type: ICMP echo request
|   |   └── ICMP target IPs:
|   |       ├── 1.1.1.1
|   |       └── 8.8.8.8
|   └── Restart VPN on healthcheck failure: yes
├── SOCKS5 proxy server settings:
|   └── Enabled: no
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   ├── Logging: yes
|   └── Authentication file path: /gluetun/auth/config.toml
├── Storage settings:
|   └── Servers directory path: /gluetun/servers/
├── OS Alpine settings:
|   ├── Process UID: 1000
|   └── Process GID: 1000
├── Public IP settings:
|   ├── IP file path: /tmp/gluetun/ip
|   ├── Public IP data base API: ipinfo
|   └── Public IP data backup APIs:
|       ├── ifconfigco
|       ├── ip2location
|       └── cloudflare
├── Server data updater settings:
|   ├── Update period: 12h0m0s
|   ├── Minimum ratio: 0.8
|   ├── Providers to update: protonvpn
|   ├── Prefer direct download: no
|   ├── Proton API email: 
|   └── Proton API password: [not set]
├── Version settings:
|   └── Enabled: yes
└── Boring-poll settings:
    └── gluetun.com: on
2026-05-23T11:51:45Z INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2026-05-23T11:51:45Z INFO [routing] adding route for 0.0.0.0/0
2026-05-23T11:51:45Z INFO [firewall] setting allowed subnets...
2026-05-23T11:51:45Z INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2026-05-23T11:51:45Z INFO [boring poll] gluetun.com is DOWN most likely thanks to you! so not doing anything anymore
2026-05-23T11:51:45Z INFO [healthcheck] listening on 127.0.0.1:9999
2026-05-23T11:51:45Z INFO [http server] http server listening on [::]:8000
2026-05-23T11:51:45Z INFO [firewall] allowing VPN connection...
2026-05-23T11:51:45Z INFO [wireguard] Using available kernelspace implementation
2026-05-23T11:51:45Z INFO [wireguard] Connecting to 141.98.213.194:51820
2026-05-23T11:51:45Z INFO [vpn] wireguard setup is complete. Note wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the wireguard connection is not working.
2026-05-23T11:51:45Z INFO [MTU discovery] finding maximum MTU, this can take up to 6 seconds
2026-05-23T11:51:50Z INFO [MTU discovery] reverting VPN interface tun0 MTU to 1320 (due to: PMTUD failed with both ICMP and TCP)
2026-05-23T11:51:50Z INFO [dns] DNS server listening on [::]:53
2026-05-23T11:51:50Z INFO [dns] ready and using DNS server with dot upstream resolvers
2026-05-23T11:51:50Z INFO [dns] downloading hostnames and IP block lists
2026-05-23T11:51:55Z INFO [ip getter] Public IP address is 141.98.213.198 (Korea, Seoul, Seoul - source: ipinfo+ifconfig.co+ip2location+cloudflare)
2026-05-23T11:51:57Z INFO [vpn] You are running 1 commit behind the most recent latest
2026-05-23T11:51:57Z INFO [port forwarding] starting
2026-05-23T11:51:58Z INFO [port forwarding] port forwarded is 38519 (internal port 56789)
2026-05-23T11:51:58Z INFO [firewall] setting allowed input port 56789 through interface tun0...
2026-05-23T11:51:58Z INFO [port forwarding] writing port file /tmp/gluetun/forwarded_port
2026-05-23T11:51:58Z INFO [dns] leak check report: 172.68.41.44 (22%), 172.70.121.224 (22%), 172.71.4.42 (22%), 162.159.111.42 (11%), 172.64.214.43 (11%), 172.68.117.96 (11%), 162.158.117.217 (5%)

Share your configuration

WITH PORT FORWARDING UP:

---
services:
  portainer:
    container_name: portainer
    image: portainer/portainer-ce:lts
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - portainer_data:/data
    ports:
      - 9443:9443

  jackett:
    image: lscr.io/linuxserver/jackett:latest
    container_name: jackett
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - AUTO_UPDATE=true #optional
      - RUN_OPTS= #optional
    volumes:
      - /home/bomby/Docker/jackett/config:/config
      - /home/bomby/Docker/jackett/blackhole:/downloads
    restart: unless-stopped
    network_mode: "service:gluetun"

  flaresolverr:
    # DockerHub mirror flaresolverr/flaresolverr:latest
    image: ghcr.io/flaresolverr/flaresolverr:latest
    container_name: flaresolverr
    environment:
      - LOG_LEVEL=${LOG_LEVEL:-info}
      - LOG_HTML=${LOG_HTML:-false}
      - CAPTCHA_SOLVER=${CAPTCHA_SOLVER:-none}
      - TZ=Asia/Seoul
    restart: unless-stopped
    network_mode: "service:gluetun"

  komga:
    image: gotson/komga
    container_name: komga
    volumes:
      - type: bind
        source: /home/bomby/Docker/Komga/config
        target: /config
      - type: bind
        source: /home/bomby/Documents/MANGA
        target: /data/MANGA
      - type: bind
        source: /home/bomby/Documents/NOVELS
        target: /data/NOVELS
    ports:
      - 25600:25600
    user: "1000:1000"
    # remove the whole environment section if you don't need it
    environment:
      - TZ=Asia/Seoul
      - <ENV_VAR>=<extra configuration>
    restart: unless-stopped

  gluetun:
    image: qmcgaw/gluetun:latest
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - VPN_SERVICE_PROVIDER=protonvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=sJ1trw8NiwP1MH6s0vQtKX4W9Q9z0gvLVYtUtBQnKmg=
      - SERVER_COUNTRIES=Korea,Japan
      - PORT_FORWARD_ONLY=on
      - VPN_PORT_FORWARDING=on
      - VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c 'wget -O- -nv --retry-connrefused --post-data "json={\"listen_port\":{{PORT}},\"current_network_interface\":\"{{VPN_INTERFACE}}\",\"random_port\":false,\"upnp\":false}" http://127.0.0.1:8080/api/v2/app/setPreferences'
      - VPN_PORT_FORWARDING_DOWN_COMMAND=/bin/sh -c 'wget -O- -nv --retry-connrefused --post-data "json={\"listen_port\":0,\"current_network_interface\":\"lo\"}" http://127.0.0.1:8080/api/v2/app/setPreferences'
      - UPDATER_PERIOD=12h
      - BORINGPOLL_GLUETUNCOM=on
    ports:
      - 8080:8080
      - 6881:6881
      - 6881:6881/udp
      - 9117:9117
      - "${PORT:-8191}:8191"
    restart: unless-stopped

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Seoul
      - WEBUI_PORT=8080
      - TORRENTING_PORT=6881
    volumes:
      - /home/bomby/Docker/qBittorrent/config:/config
      - /media/BlueSeagate/SHOWS/:/SHOWS
      - /media/BlueSeagate/ANIME:/ANIME
      - /home/bomby/Documents/MANGA/:/MANGA
      - /home/bomby/Documents:/Documents
      - /media/WindowsBTRFS:/WindowsBTRFS
      - /media/WindowsBTRFS/ROMs/:/ROMs
    restart: unless-stopped
    network_mode: "service:gluetun"

volumes:
  portainer_data:
    name: portainer_data

networks:
  default:
    name: portainer_network

WITHOUT IT:

---
services:
  portainer:
    container_name: portainer
    image: portainer/portainer-ce:lts
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - portainer_data:/data
    ports:
      - 9443:9443

  jackett:
    image: lscr.io/linuxserver/jackett:latest
    container_name: jackett
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - AUTO_UPDATE=true #optional
      - RUN_OPTS= #optional
    volumes:
      - /home/bomby/Docker/jackett/config:/config
      - /home/bomby/Docker/jackett/blackhole:/downloads
    restart: unless-stopped
    network_mode: "service:gluetun"

  flaresolverr:
    # DockerHub mirror flaresolverr/flaresolverr:latest
    image: ghcr.io/flaresolverr/flaresolverr:latest
    container_name: flaresolverr
    environment:
      - LOG_LEVEL=${LOG_LEVEL:-info}
      - LOG_HTML=${LOG_HTML:-false}
      - CAPTCHA_SOLVER=${CAPTCHA_SOLVER:-none}
      - TZ=Asia/Seoul
    restart: unless-stopped
    network_mode: "service:gluetun"

  komga:
    image: gotson/komga
    container_name: komga
    volumes:
      - type: bind
        source: /home/bomby/Docker/Komga/config
        target: /config
      - type: bind
        source: /home/bomby/Documents/MANGA
        target: /data/MANGA
      - type: bind
        source: /home/bomby/Documents/NOVELS
        target: /data/NOVELS
    ports:
      - 25600:25600
    user: "1000:1000"
    # remove the whole environment section if you don't need it
    environment:
      - TZ=Asia/Seoul
      - <ENV_VAR>=<extra configuration>
    restart: unless-stopped

  gluetun:
    image: qmcgaw/gluetun:latest
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - VPN_SERVICE_PROVIDER=protonvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=sJ1trw8NiwP1MH6s0vQtKX4W9Q9z0gvLVYtUtBQnKmg=
      - SERVER_COUNTRIES=Korea,Japan
      - PORT_FORWARD_ONLY=on
      - VPN_PORT_FORWARDING=on
      - UPDATER_PERIOD=12h
      - BORINGPOLL_GLUETUNCOM=on
    ports:
      - 8080:8080
      - 6881:6881
      - 6881:6881/udp
      - 9117:9117
      - "${PORT:-8191}:8191"
    restart: unless-stopped

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Seoul
      - WEBUI_PORT=8080
      - TORRENTING_PORT=6881
    volumes:
      - /home/bomby/Docker/qBittorrent/config:/config
      - /media/BlueSeagate/SHOWS/:/SHOWS
      - /media/BlueSeagate/ANIME:/ANIME
      - /home/bomby/Documents/MANGA/:/MANGA
      - /home/bomby/Documents:/Documents
      - /media/WindowsBTRFS:/WindowsBTRFS
      - /media/WindowsBTRFS/ROMs/:/ROMs
    restart: unless-stopped
    network_mode: "service:gluetun"

volumes:
  portainer_data:
    name: portainer_data

networks:
  default:
    name: portainer_network

[github-actions]

@qdm12 is more or less the only maintainer of this project and works on it in his free time.
Please:

• do not ask for updates, be patient
• 👍 the issue to show your support instead of commenting
  @qdm12 usually checks issues at least once a week, if this is a new urgent bug,
  revert to an older tagged container image

[qdm12]

does it work with :v3.41?
the recent "fix" 2210a0e may be at fault here I'll check

[qdm12]

WITH PORT FORWARDING UP:

Port forwarding does work

2026-05-23T11:49:07Z INFO [port forwarding] starting
2026-05-23T11:49:07Z INFO [port forwarding] port forwarded is 55663 (internal port 56789)
2026-05-23T11:49:07Z INFO [firewall] setting allowed input port 56789 through interface tun0...
2026-05-23T11:49:07Z INFO [port forwarding] writing port file /tmp/gluetun/forwarded_port

but your qbitorrent is inaccessible, the log below is coming from your up command. double check qbittorrent is accessible first, you can try by exec-ing in gluetun and using wget

ERROR [port forwarding] failed: Connection refused.

WITHOUT IT:

Port forwarding does work

2026-05-23T11:51:57Z INFO [port forwarding] starting
2026-05-23T11:51:58Z INFO [port forwarding] port forwarded is 38519 (internal port 56789)
2026-05-23T11:51:58Z INFO [firewall] setting allowed input port 56789 through interface tun0...
2026-05-23T11:51:58Z INFO [port forwarding] writing port file /tmp/gluetun/forwarded_port

VPN doesn't work and doesn't STDOUT after time passed, staying at the dns leak report section. If using the vpn port forwarding up command, it just can't port forward.

First of all from your logs the VPN does work. Port forwading also works. There is nothing after the dns leak report section because that's the last command runnning after the vpn connection is up. Please clarify what's wrong.

[BombasticBooger]

apologies, I probably should've posted this in the discussions section but didnt really know what the cause is:

this might be a qbittorrent issue? the issue is that I can't access qbittorrent regardless with both composes.

[BombasticBooger]

[migrations] started
[migrations] no migrations found
───────────────────────────────────────
      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝
   Brought to you by linuxserver.io
───────────────────────────────────────
To support LSIO projects visit:
https://www.linuxserver.io/donate/
───────────────────────────────────────
GID/UID
───────────────────────────────────────
User UID:    1000
User GID:    1000
───────────────────────────────────────
Linuxserver.io version: 5.2.0_v2.0.12-ls458
Build-date: 2026-05-17T08:57:46+00:00
───────────────────────────────────────
    
[custom-init] No custom files found, skipping...

the qbittorrent logs dont really seem to show anything

[qdm12]

you can't access qbittorrent with your browser, it's a tcp server but not an http server

test the port using the test it section at https://github.com/qdm12/gluetun-wiki/blob/main/setup/advanced/vpn-port-forwarding.md#test-it (and turn off qbittorrent temporarily)
if it works then it's qbittorrent being misconfigured somehow

[BombasticBooger]

it's the webui url, it used to work before to show me the qbittorrent UI

i'll try this and respond back

[BombasticBooger]

is this what should appear?

[qdm12]

yes so it works.

watch out you leaked your wireguard private key so make sure to disable it and create a new one.

you should not publish port 6881 on gluetun side. the torrenting port 6881 (or other) should go through the vpn tunnel only.

the error you get with connection refused is likely just qbittorrent actively refusing the connection. Maybe check the api is enabled etc.? You can try exec-ing in gluetun and try that up command directly to debug what's up or find some help in the discussions section. AI might help you find out what's wrong.

closing this given it's not a bug and it works as intended at least from gluetun's perspective