On Mon, Dec 11, 2006 at 02:43:56PM -0500, Bill wrote:
> I have an OpenVPN server running on OpenBSD 3.8 (x86). I've been
> having intermitten problems with it and reconnection problems. It's
> openvpn out of ports for 3.8.
>
> I have it down to right now, sporadically, the OpenVPN server thinks
> it is sending UDP packets (and in the logs makes note that it has) but
> I cannot see them leaving the external interface...
>
> What can I do to track down where this is going wrong? Is there some
> way to see if OpenBSD is taking this packet and then losing it?
>
> I am just not sure where to look next. I've watched it happen, and
> the traffic is very low, the utlization is like so:
>
> load averages: 0.40, 0.54, .60
> 38 processes: 37 idle, 1 on processor
> CPU states: 2.7% user, 0.0% nice, 3.7% system, 1.6% interrupt, 92.0% idle
> Memory: Real: 678M/824M act/tot Free: 684M Swap: 0K/3072M used/tot
>
> The strange part is that it works fine for a while, then suddenly
> starts up with this behavior... We've had this happen with clients on
> all different platforms (windows / mac / linux).
>
> We have an upgrade to OpenBSD 4.0 set for the first few weeks of next
> year... I've another 3.8 machine running this fine with no problems
> whatsoever...
No clue. Check your logs (openvpn and kernel, at least), send some test
packets, and take a good look at pf.
I've used OpenVPN on 3.8 and more recently 4.0, without any problems, so
it should work. For what that is worth...
Are you certain, BTW, that it is not the *other* side that is at fault?
tcpdump can be useful here.
Joachim
