Re: [Openvpn-devel] [PATCH] Allow 'lport 0' setup for random port binding

2010-03-01 Thread Enrico Scholz
Till Maas writes: >> |- if (!legal_ipv4_port (port)) >> |+ if (port != 0 && !legal_ipv4_port (port)) > > I am pretty sure that it is possible to listen on port 0, not on linux; e.g. see in net/ipv4/inet_connection_sock.c the implementation of | /* Obtain a reference to a local port

Re: [Openvpn-devel] RFE: allow 'lport 0' setup for random port binding

2010-01-11 Thread Enrico Scholz
Peter Stuge writes: >> >> I am running a multihomed host where 'local ' must be >> >> specified for proper operation. >> > >> > Could you add a route and use nobind? Unless you have one openvpn >> > on each IP that should work. >> >> I would really like to avoid the NAT hackery. > > I didn't mea

Re: [Openvpn-devel] RFE: allow 'lport 0' setup for random port binding

2010-01-11 Thread Enrico Scholz
Peter Stuge writes: >> I am running a multihomed host where 'local ' must be >> specified for proper operation. > > Could you add a route and use nobind? Unless you have one openvpn on > each IP that should work. I would really like to avoid the NAT hackery. >> On ungraceful reconnects, the ne

[Openvpn-devel] RFE: allow 'lport 0' setup for random port binding

2010-01-09 Thread Enrico Scholz
Hi, I am running a multihomed host where 'local ' must be specified for proper operation. Unfortunately, this implies 'lport 1194' or another static port. This causes problems with stateful firewalls which register the host/port pairs in the internal connection tracking table. On ungraceful rec