Hi,

On 12/01/15 13:54, Alfredo Palhares wrote:
> Hello,
>
> So, I created another vpn server on TCP and the connections gets there,
> but I have a problem on the connection back to the client.
>
> Since obfsproxy only can redirect one port back.
>
> The server:
> ```
> Sun Jan 11 00:52:43 2015 172.31.37.18:50913
> SIGUSR1[soft,connection-reset] received, client-instance restarting
> Sun Jan 11 01:20:31 2015 TCP connection established with
> [AF_INET]172.31.37.18:50917
> Sun Jan 11 01:20:31 2015 172.31.37.18:50917 WARNING: Bad encapsulated
> packet length from peer (18245), which must be > 0 and <= 1544 -- please
> ensure t
> hat --tun-mtu or --link-mtu is equal on both peers -- this condition
> could also indicate a possible active attack on the TCP link --
> [Attempting restar
> t...]
> ```
>
> but the port 50917 its not reached and because it does not get back to
> the server.
>
> And the client:
> ```
> Fri Jan  9 19:31:16 2015 socks_handshake: TCP port read timeout expired:
> Operation now in progress (errno=115)
> ```
>
> How can I ensure the same port is always used ?
>
>
you would have to use a different client configuration for each client, 
tied to the corresponding obfsproxy config. You can bind a client to a 
specific port using
   lport XXXXX
where XXXXX is a port number > 1024

HTH,

JJK



------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
vanity: www.gigenet.com
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to