My client config file: remote localhost rport 2000 proto tcp-client dev tap ifconfig 192.168.16.43 255.255.255.0 secret key.txt ping-restart 60 ping-timer-rem persist-tun persist-key resolv-retry 86400 ping 45 comp-lzo verb 5 mute 10
-------------------------- My server config file: lport 443 proto tcp-server dev tap ifconfig 192.168.16.42 255.255.255.0 dev-node "Open VPN" secret key.txt ping 45 comp-lzo verb 5 mute 10 --------------------------- Communication from client goes through HTTP proxy, which supports CONNECT method on port 443. Program (PortTunnel) that sends CONNECT to proxy runs on port 2000. It does same thing as http-proxy parameter in OpenVPN, but with this parameter I had problems. When I use this parameter it generates following errors after connecting (with help of PortTunnel it works OK): ---------------------------- Wed Dec 03 18:32:00 2003 37: Send to HTTP proxy: 'CONNECT mycomp.dyndns.ws:443 HTTP/1.0' Wed Dec 03 18:32:04 2003 38: HTTP proxy returned: 'HTTP/1.0 200 OK' Wed Dec 03 18:32:04 2003 39: TCPv4_CLIENT link local: [undef] Wed Dec 03 18:32:04 2003 40: TCPv4_CLIENT link remote: 127.0.0.1:3128 Wed Dec 03 18:32:04 2003 41: TCPv4_CLIENT WRITE [60] to 127.0.0.1:3128: DATA len=60 Wed Dec 03 18:32:04 2003 42: TCPv4_CLIENT WRITE [84] to 127.0.0.1:3128: DATA len=84 Wed Dec 03 18:32:04 2003 43: TCPv4_CLIENT WRITE [84] to 127.0.0.1:3128: DATA len=84 Wed Dec 03 18:32:04 2003 44: WARNING: Bad encapsulated packet length from peer (17505), which must be > 0 and <= 1579 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attemping restart...] Wed Dec 03 18:32:04 2003 45: Connection reset, restarting [0] Wed Dec 03 18:32:04 2003 46: PID packet_id_free Wed Dec 03 18:32:04 2003 47: Closing TCP/UDP socket Wed Dec 03 18:32:04 2003 48: Restart pause, 10 second(s) ---------------------------- Server is connected directly to internet via dial-up. Vasek Lipert -----Original Message----- From: James Yonan [mailto:j...@yonan.net] Sent: Wednesday, December 10, 2003 12:38 PM To: Lipert Václav; openvpn-devel@lists.sourceforge.net Subject: Re: [Openvpn-devel] TCP tunnel problem on Windows Lipert, The error messages below occur because of an IRP Queue overrun in the TAP-Win32 driver. The IRP Queue handles the packet flow from the TAP driver to the userspace component of OpenVPN. Not sure why this would occur, though your config files might shed some light. James Lipert Václav <vlip...@cpoj.cz> said: > Hello, > > I am using OpenVPN 1.5.0 for Windows (windowsxp - windowsxp, tap, > tcp-client tcp-server) and I have one problem. After connection establishing work pinging OK, but when I try connect from server to client with VNC or Remote Desktop Connection (from Microsoft) it is working for few seconds (first screen loaded) and then stops working all TCP/IP communication (pinging doesnt work). On side of client it generates this error (on server side it is no error): > > Mon Dec 08 18:11:57 2003 672: TCPv4_CLIENT link local: [undef] Mon Dec > 08 18:11:57 2003 673: TCPv4_CLIENT link remote: 127.0.0.1:2000 Mon Dec > 08 18:11:57 2003 674: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:57 2003 675: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:57 2003 676: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:57 2003 677: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:57 2003 678: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:57 2003 679: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:57 2003 680: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:58 2003 681: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:58 2003 682: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:11:58 2003 683: read from TUN/TAP [State=AT?c Err=[c:\src\openvpn\tap-win32\tapdrvr.c/1756] #O=5 Tx=[315,0] Rx=[0,0] IrpQ=[16,16,16] PktQ=[0,10,64]]: General failure (ERROR_GEN_FAILURE) (code=31) > Mon Dec 08 18:12:27 2003 684: 269 variation(s) on previous 10 > message(s) suppressed by --mute > Mon Dec 08 18:12:27 2003 685: Connection reset, restarting [0] Mon Dec > 08 18:12:27 2003 686: Closing TCP/UDP socket Mon Dec 08 18:12:27 2003 > 687: Restart pause, 3 second(s) > > > Anyone knows, where could be a problem? > > Thanks > Wally > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it help you > create better code? SHARE THE LOVE, and help us help YOU! Click > Here: http://sourceforge.net/donate/ > _______________________________________________ > Openvpn-devel mailing list > Openvpn-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-devel > --