Re: [Openvpn-devel] Hold Release / Proxy Sequence

2015-09-17 Thread Morris, Russell
FYI, got it working - thanks so much for the pointer. Much appreciated! ... Russell From: Morris, Russell Sent: Thursday, September 17, 2015 12:42 PM To: 'Arne Schwabe' ; openvpn-devel@lists.sourceforge.net Subject: RE: [Openvpn-devel] Hold Release / Proxy Sequence Hi, Will dig into this one f

[Openvpn-devel] [PATCH applied] Re: Do not install a host route for the VPN on Android

2015-09-17 Thread Gert Doering
ACK (as expected - since this code will not do useful things on Android, just #ifndef it away) Your patch has been applied to the master branch. commit 1ff39cff4e644103607f0266cd4666dab18716c5 Author: Arne Schwabe List-Post: openvpn-devel@lists.sourceforge.net Date: Thu Sep 17 12:23:58 2015 +0

[Openvpn-devel] [PATCH applied] Re: Implement handling of overlapping IPv6 routes with IPv6 remote VPN server address

2015-09-17 Thread Gert Doering
Patch has been applied to the master branch, with the change Arne has proposed ("because it makes sense" :) ), making "bits" inside route_ipv6_match_host() unsigned and drop the "if (bits<0)" check. commit 3ddb56433b1fa0f20565dfda13a647459c06251a Author: Gert Doering List-Post: openvpn-devel@lists

Re: [Openvpn-devel] Hold Release / Proxy Sequence

2015-09-17 Thread Morris, Russell
Hi, Will dig into this one further ... :). I admit, lots of options (a good thing!), I wasn't aware of this one (and with a brief look, a bit confused yet, but I'll dig). Thanks!!! ... Russell From: Arne Schwabe [mailto:a...@rfc2549.org] Sent: Thursday, September 17, 2015 12:11 PM To: Morri

[Openvpn-devel] [PATCH applied] Re: get_default_gateway_ipv6(): Linux / Netlink implementation.

2015-09-17 Thread Gert Doering
Patch has been applied to the master branch. commit 3128abcfdd1eb293b10e4d0bfdb0805728538563 Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Fri Sep 11 17:33:42 2015 +0200 get_default_gateway_ipv6(): Linux / Netlink implementation. Signed-off-by: Gert Doerin

Re: [Openvpn-devel] [PATCH 05/10] get_default_gateway_ipv6(): Linux / Netlink implementation.

2015-09-17 Thread Gert Doering
Hi, thanks for your review. Some comments before I go committing :-) On Tue, Sep 15, 2015 at 10:45:48AM +0100, Arne Schwabe wrote: > > +CLEAR(rtreq); > +rtreq.nh.nlmsg_type = RTM_GETROUTE; > +rtreq.nh.nlmsg_flags = NLM_F_REQUEST;/* XXX */ > > There should an ind

Re: [Openvpn-devel] Hold Release / Proxy Sequence

2015-09-17 Thread Arne Schwabe
Am 17.09.15 um 17:52 schrieb Morris, Russell: > > Hi, > > > > Nope … J. I don’t want to – only because the proxy changes, depending > win where I am. So I detect and set it (i.e. it’s dynamic), but if I’m > too slow … L. > > > > Either you do managment-query-proxy or you set http-proxy in you

Re: [Openvpn-devel] Management Interface, Read from File

2015-09-17 Thread Morris, Russell
Hi, Only because I'm struggling to send commands fast enough to get a connection up (related to my struggles with setting the proxy). Thanks, ... Russell From: Arne Schwabe [mailto:a...@rfc2549.org] Sent: Thursday, September 17, 2015 11:47 AM To: Morris, Russell ; openvpn-devel@lists.sourcefor

Re: [Openvpn-devel] Hold Release / Proxy Sequence

2015-09-17 Thread Morris, Russell
Hi, Nope ... :). I don't want to - only because the proxy changes, depending win where I am. So I detect and set it (i.e. it's dynamic), but if I'm too slow ... :(. Thoughts? Thanks! ... Russell From: Arne Schwabe [mailto:schw...@uni-paderborn.de] Sent: Thursday, September 17, 2015 11:46 A

Re: [Openvpn-devel] Management Interface, Read from File

2015-09-17 Thread Arne Schwabe
Am 17.09.15 um 17:21 schrieb Morris, Russell: > Hi, > > Is there any way to have the management interface take a list of > commands from a text / script file? That would be very helpful. > > That makes no sense though. I cannot think of a use case where this is useful. Arne

[Openvpn-devel] Management Interface, Read from File

2015-09-17 Thread Morris, Russell
Hi, Is there any way to have the management interface take a list of commands from a text / script file? That would be very helpful. Thanks! ... Russell

[Openvpn-devel] Hold Release / Proxy Sequence

2015-09-17 Thread Morris, Russell
Hi, Perhaps a bit of a dumb question, but I'm trying to use the management interface - and struggling a bit with timing / sequencing. I'm trying to get things worked out manually entering commands, but I find that after "hold release" I'm too slow typing in my proxy information ... but that rai

[Openvpn-devel] [PATCH applied] Re: RfD: speed up PUSH_REQUEST...

2015-09-17 Thread Gert Doering
Patch has been applied to the master branch. commit afb93fac803fbab7406d3b2dff6d1f39365bca74 Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Wed Jul 1 17:40:39 2015 +0200 Make client delay less before sending PUSH_REQUEST Acked-by: Arne Schwabe Messag

[Openvpn-devel] [PATCH v3] Do not install a host route for the VPN on Android

2015-09-17 Thread Arne Schwabe
Routing loops are avoided using the VPNService API protect API --- src/openvpn/route.c | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/openvpn/route.c b/src/openvpn/route.c index 3959abd..0142c58 100644 --- a/src/openvpn/route.c +++ b/src/openvpn/route.c @@ -768,6 +76

[Openvpn-devel] [PATCH v2] Do not install a host route for the VPN on Android

2015-09-17 Thread Arne Schwabe
Routing loops are avoided using the VPNService API protect API --- src/openvpn/route.c | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/openvpn/route.c b/src/openvpn/route.c index 3959abd..0142c58 100644 --- a/src/openvpn/route.c +++ b/src/openvpn/route.c @@ -768,6 +76

Re: [Openvpn-devel] [PATCH 08/10] get_default_gateway_ipv6(): *BSD / MacOS / Solaris PF_ROUTE implementation

2015-09-17 Thread Arne Schwabe
Am 11.09.15 um 16:33 schrieb Gert Doering: > As for IPv4, a common implementation for all (supported) BSD families > and Solaris. Supporting the latter requires separate implementations > for IPv4 and IPv6, unfortunately, so it's quite a bit of duplicate > code. > > Further, extend add_route_ipv

Re: [Openvpn-devel] [PATCH 09/10] Fix IPv6 host routes to LAN gateway on OpenSolaris

2015-09-17 Thread Arne Schwabe
Am 11.09.15 um 16:33 schrieb Gert Doering: > The tun/tap routes need to be set with "metric 0", while this will > prevent routes to LAN gateways from being installed. So, set metric 0 > only if no other interface is requested... > > (Note: OpenSolaris can not specify host+interface gateways, so

Re: [Openvpn-devel] RfD: speed up PUSH_REQUEST...

2015-09-17 Thread Arne Schwabe
Am 01.07.15 um 16:40 schrieb Gert Doering: > Hi, > > experimenting with the MTU patch, I discovered that we basically sit > idle for two seconds on the client between "TLS is up!" and "PUSH_REQUEST". > > This is part due to the coarse granularity of, well, our coarse timers, > but in part due to