On 28.05.2017 18:20, Selva Nair wrote:
> Hi,
>
> Copying the -devel list:
>
> On Sun, May 28, 2017 at 10:16 AM, ValdikSS <valdi...@gmail.com
> <mailto:valdi...@gmail.com>> wrote:
>
> Is this only with 2.4.2 or is 2.4.1 also affected? As you imply, the filters
> won't persist after the process ends (in this case the service), restarting
> service should be enough to clear them. Further, even if the openvpn client
> process terminates without removing the filters, the service should clean up
> all filters added in that session during the undo() processing. However, that
> wont happen if the openvpn.exe process fails to exit. Verify that a stale
> client process is not hanging around.
I believe it was tested with 2.4.2. I cannot reproduce this issue and persons
who reported it are not tech-savvy. Pavel configured server to push
"persist-tun" to clients and says it works correctly now.
>
>
> The tap adapter index is used to allow dns traffic through it, not block it,
> so I would think the failure is in unblocking dns through non-tap adapters.
> If that is the case, dns should start working again through the tunnel when
> the client reconnects.
>
> Anyway, we need to see the client logs and any error event logged by the
> service when this happens. Can you get the user to open a ticket with logs?
Since this service is becoming popular and Pavel has 4000+ users, we have seen
a lot of absolutely crazy OpenVPN errors on Windows. Most of them are because
of old Windowses with disabled updates, but some of them are interesting, like
sometimes block-outside-dns fails to remove it's own filters.
We ask people to create bugs on OpenVPN bugtracker but I think almost nobody
feels comfortable for their English and do not do that.
You can skip through comments on https://zaborona.help/ to see some screenshots
and logs.
Like this one: https://zaborona.help/faq.html#comment-3328754341
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
