Hi, On 01/04/2021 14:10, Gert Doering wrote: > Hi, > > On Thu, Apr 01, 2021 at 12:47:46PM +0200, Arne Schwabe wrote: >> In your dco to dco setup you probably >> don't have mssfix on either side unless you explicitly added iptables >> rules for that. > > Ah, this is interesting and needs to be documented - "if you want feature > <a>, <b>, <c> together with DCO, it needs to be done in iptables". > > (Of course it makes lots of sense to defer this to iptables etc. on > all platforms that have DCO *and* a reasonable firewall layer... dco-win > will be interesting)
Features that are not compatible with DCO are being documented in the code as we go. If you try to explicitly use one of those with DCO, openvpn2 will log a big warning and will tell you that it is switching to non-DCO mode to make sure your connection can work. However, we will definitely make some larger doc explaining what we decided that DCO should not do and what are possible alternatives. Regards, -- Antonio Quartulli _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
