salam khobi
2014-12-02 16:04 GMT+03:30 <[email protected]>:
> Send Openvpn-users mailing list submissions to
> [email protected]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
> or, via email, send a message with subject or body 'help' to
> [email protected]
>
> You can reach the person managing the list at
> [email protected]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Openvpn-users digest..."
>
>
> Today's Topics:
>
> 1. Re: How to send to the client the REAL IP she has (Jesus Cea)
> 2. Re: How to send to the client the REAL IP she has (Eric Crist)
> 3. Re: How to send to the client the REAL IP she has (Jesus Cea)
> 4. Re: How to send to the client the REAL IP she has (Eric Crist)
> 5. Re: How to send to the client the REAL IP she has (Jesus Cea)
> 6. Re: How to send to the client the REAL IP she has
> (Jan Just Keijser)
> 7. CVE-2014-9104 - looks like no issue for modern versions?
> (Alan McKay)
> 8. Re: CVE-2014-9104 - looks like no issue for modern versions?
> (Gert Doering)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 02 Dec 2014 00:28:23 +0100
> From: Jesus Cea <[email protected]>
> Subject: Re: [Openvpn-users] How to send to the client the REAL IP she
> has
> To: Eric Crist <[email protected]>
> Cc: "[email protected]"
> <[email protected]>
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="iso-8859-15"
>
> On 01/12/14 23:45, Eric Crist wrote:
> > Source IP/Port are available in client connect and disconnect scripts,
> as well as the openvpn console or status log.
>
> Yes, I know. The question is what must I "push" to the iOS client to
> display that in the OpenVPN client.
>
> --
> Jes?s Cea Avi?n _/_/ _/_/_/ _/_/_/
> [email protected] - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/
> Twitter: @jcea _/_/ _/_/ _/_/_/_/_/
> jabber / xmpp:[email protected] _/_/ _/_/ _/_/ _/_/ _/_/
> "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
> "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
> "El amor es poner tu felicidad en la felicidad de otro" - Leibniz
>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: signature.asc
> Type: application/pgp-signature
> Size: 473 bytes
> Desc: OpenPGP digital signature
>
> ------------------------------
>
> Message: 2
> Date: Mon, 1 Dec 2014 17:28:55 -0600
> From: Eric Crist <[email protected]>
> Subject: Re: [Openvpn-users] How to send to the client the REAL IP she
> has
> To: Jesus Cea <[email protected]>
> Cc: "[email protected]"
> <[email protected]>
> Message-ID:
> <[email protected]>
> Content-Type: text/plain; charset=iso-8859-1
>
> You can't.
>
> -----
> Eric F Crist
>
>
>
> On Dec 1, 2014, at 17:28:23, Jesus Cea <[email protected]> wrote:
>
> > On 01/12/14 23:45, Eric Crist wrote:
> >> Source IP/Port are available in client connect and disconnect scripts,
> as well as the openvpn console or status log.
> >
> > Yes, I know. The question is what must I "push" to the iOS client to
> > display that in the OpenVPN client.
> >
> > --
> > Jes?s Cea Avi?n _/_/ _/_/_/ _/_/_/
> > [email protected] - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/
> > Twitter: @jcea _/_/ _/_/ _/_/_/_/_/
> > jabber / xmpp:[email protected] _/_/ _/_/ _/_/ _/_/ _/_/
> > "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
> > "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
> > "El amor es poner tu felicidad en la felicidad de otro" - Leibniz
> >
>
>
>
>
> ------------------------------
>
> Message: 3
> Date: Tue, 02 Dec 2014 00:31:14 +0100
> From: Jesus Cea <[email protected]>
> Subject: Re: [Openvpn-users] How to send to the client the REAL IP she
> has
> To: Eric Crist <[email protected]>
> Cc: "[email protected]"
> <[email protected]>
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="iso-8859-15"
>
> On 02/12/14 00:28, Eric Crist wrote:
> > You can't.
>
> So, there is NO WAY AT ALL I can fill those empty boxes in the GUI?.
> What is the point of having them, then? :-??
>
> --
> Jes?s Cea Avi?n _/_/ _/_/_/ _/_/_/
> [email protected] - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/
> Twitter: @jcea _/_/ _/_/ _/_/_/_/_/
> jabber / xmpp:[email protected] _/_/ _/_/ _/_/ _/_/ _/_/
> "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
> "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
> "El amor es poner tu felicidad en la felicidad de otro" - Leibniz
>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: signature.asc
> Type: application/pgp-signature
> Size: 473 bytes
> Desc: OpenPGP digital signature
>
> ------------------------------
>
> Message: 4
> Date: Mon, 1 Dec 2014 17:48:14 -0600
> From: Eric Crist <[email protected]>
> Subject: Re: [Openvpn-users] How to send to the client the REAL IP she
> has
> To: Jesus Cea <[email protected]>
> Cc: "[email protected]"
> <[email protected]>
> Message-ID:
> <[email protected]>
> Content-Type: text/plain; charset=iso-8859-1
>
> Which boxes are you talking about?
>
> -----
> Eric F Crist
>
>
>
> On Dec 1, 2014, at 17:31:14, Jesus Cea <[email protected]> wrote:
>
> > On 02/12/14 00:28, Eric Crist wrote:
> >> You can't.
> >
> > So, there is NO WAY AT ALL I can fill those empty boxes in the GUI?.
> > What is the point of having them, then? :-??
> >
> > --
> > Jes?s Cea Avi?n _/_/ _/_/_/ _/_/_/
> > [email protected] - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/
> > Twitter: @jcea _/_/ _/_/ _/_/_/_/_/
> > jabber / xmpp:[email protected] _/_/ _/_/ _/_/ _/_/ _/_/
> > "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
> > "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
> > "El amor es poner tu felicidad en la felicidad de otro" - Leibniz
> >
>
>
>
>
> ------------------------------
>
> Message: 5
> Date: Tue, 02 Dec 2014 01:12:11 +0100
> From: Jesus Cea <[email protected]>
> Subject: Re: [Openvpn-users] How to send to the client the REAL IP she
> has
> To: Eric Crist <[email protected]>
> Cc: "[email protected]"
> <[email protected]>
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="iso-8859-15"
>
> On 02/12/14 00:48, Eric Crist wrote:
> > Which boxes are you talking about?
>
> Go to
> <https://itunes.apple.com/us/app/openvpn-connect/id590379981?mt=8>.
> Scroll to the third screen screenshot (note the funny horizontal
> scrollbar under the snapshots).
>
> Between the VPN IPv6 and the Server/Server IP details you will see
> "User" and "Client IP". I would like to be able to push information to
> those fields.
>
> --
> Jes?s Cea Avi?n _/_/ _/_/_/ _/_/_/
> [email protected] - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/
> Twitter: @jcea _/_/ _/_/ _/_/_/_/_/
> jabber / xmpp:[email protected] _/_/ _/_/ _/_/ _/_/ _/_/
> "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
> "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
> "El amor es poner tu felicidad en la felicidad de otro" - Leibniz
>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: signature.asc
> Type: application/pgp-signature
> Size: 473 bytes
> Desc: OpenPGP digital signature
>
> ------------------------------
>
> Message: 6
> Date: Tue, 02 Dec 2014 10:20:25 +0100
> From: Jan Just Keijser <[email protected]>
> Subject: Re: [Openvpn-users] How to send to the client the REAL IP she
> has
> To: Jesus Cea <[email protected]>
> Cc: "[email protected]"
> <[email protected]>
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset=windows-1252; format=flowed
>
> Hi,
>
> On 02/12/14 01:12, Jesus Cea wrote:
> > On 02/12/14 00:48, Eric Crist wrote:
> >> Which boxes are you talking about?
> > Go to
> > <https://itunes.apple.com/us/app/openvpn-connect/id590379981?mt=8>.
> > Scroll to the third screen screenshot (note the funny horizontal
> > scrollbar under the snapshots).
> >
> > Between the VPN IPv6 and the Server/Server IP details you will see
> > "User" and "Client IP". I would like to be able to push information to
> > those fields.
> >
> >
> you'll have to talk to OpenVPN Inc, the maker of the OpenVPN Connect
> client, as it's not open source.
> In theory you can push such information to the client but it's up to the
> client GUI to pick it up and do something with it. My guess is that the
> OpenVPN Connect client will not do anything with a pushed IP.
>
> I have no idea what the client IP field is for - perhaps it's in the
> documentation?
>
> JJK
>
>
>
>
>
> ------------------------------
>
> Message: 7
> Date: Tue, 2 Dec 2014 07:24:50 -0500
> From: Alan McKay <[email protected]>
> Subject: [Openvpn-users] CVE-2014-9104 - looks like no issue for
> modern versions?
> To: [email protected]
> Message-ID:
> <CAH8ZPGm3ejV2A8GKgv_7-ZxXk=8fNrpzwgQWKzZp+=
> [email protected]>
> Content-Type: text/plain; charset=ISO-8859-1
>
> So am I reading this right? This only affects a really old version of
> OpenVPN?
> Nothing to worry about with a modern install (2.x.y)
>
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9104
>
> --
> "Don't eat anything you've ever seen advertised on TV"
> - Michael Pollan, author of "In Defense of Food"
>
>
>
> ------------------------------
>
> Message: 8
> Date: Tue, 2 Dec 2014 13:34:03 +0100
> From: Gert Doering <[email protected]>
> Subject: Re: [Openvpn-users] CVE-2014-9104 - looks like no issue for
> modern versions?
> To: Alan McKay <[email protected]>
> Cc: [email protected]
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="us-ascii"
>
> Hi,
>
> On Tue, Dec 02, 2014 at 07:24:50AM -0500, Alan McKay wrote:
> > So am I reading this right? This only affects a really old version of
> OpenVPN?
> > Nothing to worry about with a modern install (2.x.y)
> >
> > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9104
>
> This is about the web gui of OpenVPN Access Server - so, unless you
> run AS, it's not relevant to you. If you do, make sure you run a recent-
> enough version (note that this advisory is from July!).
>
> Yesterday's OpenVPN advisory (CVE-2014-8104) is relevant for all server
> operators that have untrusted clients - typically, commercial VPN operators
> - and affects ALL versions, 2.1/2.2/2.3/git master, and OpenVPN AS.
>
> Clients do not strictly need to upgrade, as servers can always make clients
> exit by means of the OpenVPN protocol.
>
> gert
>
> --
> USENET is *not* the non-clickable part of WWW!
> //
> www.muc.de/~gert/
> Gert Doering - Munich, Germany
> [email protected]
> fax: +49-89-35655025
> [email protected]
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: not available
> Type: application/pgp-signature
> Size: 291 bytes
> Desc: not available
>
> ------------------------------
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
>
> ------------------------------
>
> _______________________________________________
> Openvpn-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>
>
> End of Openvpn-users Digest, Vol 103, Issue 2
> *********************************************
>
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
