Hi,

 

Has anyone had any luck with the auto-proxy function, in particular with PAC 
files? It really doesn't seem to be working for me ... :-(.

 

Also, does anyone have a proxy server that requires authentication? I currently 
use a text file (which does work!), but there are also Windows functions that 
should send domain login information automatically. It would be nice to to that 
... :-).

 

Thoughts?

 

Thanks!

 

... Russell

 



On Tue, 07/26/2011 06:03 PM, Russell Morris <open...@rkmorris.us> wrote:


> 



Hi,

 

I admit, I didn't know about that option - guess I missed that ... :-(.

 

When you mentioned it though, I was very happy to see it - so I decided to give 
it a try. It doesn't seem to work for me though (perhaps because of proxy PAC 
files?). Is there a way to see what proxy OpenVPN detected (to try to debug 
this)?

 

Thanks,

... Russell

 


> 
> On Mon, 07/25/2011 10:55 PM, Jason Haar <jason.h...@trimble.co.nz> wrote:
> 

> 

On 26/07/11 14:57, Russell Morris wrote: 
> 


> 





 * 
 * 
 * 



I use OpenVPN with a Windows client, and I tend to be on one network one 
minute, another the next. One time with a proxy, the next time without … so I 
really want OpenVPN to automatically detect the proxy (if there is one), and 
apply it … for every connection restart, client open, etc. My thinking is to 
add a new option, say something like “auto-proxy” (so this won’t break anything 
that is already working!). The idea being that if this option is enabled, then 
on every connection / reconnection attempt OpenVPN will first check the proxy, 
and then apply it for the actual connection back to the server. Hopefully this 
makes sense so far … J.

...isn't that already done by "--auto-proxy"? Been part of openvpn since 
2.1(ish?)

BTW: I totally agree this is a big deal. For openvpn to be truly brilliant, it 
needs

1. one config to handle both udp and tcp-based "<connection>" profiles [sorta 
supported]
2. "fragment", "mss-fix" and proxy support within profiles  [not currently 
supported - which effectively makes "1." never work in practice]
3. dynamically figure out if a proxy is available and use that for TCP-based 
profiles [I thought that was supported by "--auto-proxy"]

With such features and a properly ordered config, you'd have a VPN client that 
would tunnel out over UDP if it can, TCP if it can't, and TCP-via-proxy if it 
has to. Basically, you'd be guaranteed a working VPN session on any network 
that you're meant to be able to do such things on (with one config).


-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

------------------------------------------------------------------------------
Magic Quadrant for Content-Aware Data Loss Prevention
Research study explores the data loss prevention market. Includes in-depth
analysis on the changes within the DLP market, and the criteria used to
evaluate the strengths and weaknesses of these DLP solutions.
http://www.accelacomm.com/jaw/sfnl/114/51385063/ 
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
------------------------------------------------------------------------------
Got Input? Slashdot Needs You.
Take our quick survey online. Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey 
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to