Hi,

On Thu, Apr 01, 2021 at 02:16:25PM +0200, Antonio Quartulli wrote:
> > (Of course it makes lots of sense to defer this to iptables etc. on
> > all platforms that have DCO *and* a reasonable firewall layer... dco-win
> > will be interesting)
> 
> Features that are not compatible with DCO are being documented in the
> code as we go.
> 
> If you try to explicitly use one of those with DCO, openvpn2 will log a
> big warning and will tell you that it is switching to non-DCO mode to
> make sure your connection can work.

Which is actually interesting for mssfix, as that is "on by default",
so "all configs are incompatible with DCO", by that definition :-)

> However, we will definitely make some larger doc explaining what we
> decided that DCO should not do and what are possible alternatives.

*like*

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to