Re: [Openvpn-devel] [PATCH] Allow 'lport 0' setup for random port binding

2010-03-01 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/02/10 14:44, David Sommerseth wrote: > From: Enrico Scholz > > I am running a multihomed host where 'local ' must be specified > for proper operation. Unfortunately, this implies 'lport 1194' or > another static port. > > This causes problems

Re: [Openvpn-devel] [PATCH] Allow 'lport 0' setup for random port binding

2010-03-01 Thread Enrico Scholz
Till Maas writes: >> |- if (!legal_ipv4_port (port)) >> |+ if (port != 0 && !legal_ipv4_port (port)) > > I am pretty sure that it is possible to listen on port 0, not on linux; e.g. see in net/ipv4/inet_connection_sock.c the implementation of | /* Obtain a reference to a local port

Re: [Openvpn-devel] [PATCH] Allow 'lport 0' setup for random port binding

2010-02-28 Thread Gert Doering
Hi, On Sun, Feb 28, 2010 at 02:44:14PM +0100, David Sommerseth wrote: > I am running a multihomed host where 'local ' must be specified > for proper operation. Unfortunately, this implies 'lport 1194' or > another static port. > > This causes problems with stateful firewalls which register the h

[Openvpn-devel] [PATCH] Allow 'lport 0' setup for random port binding

2010-02-28 Thread David Sommerseth
From: Enrico Scholz I am running a multihomed host where 'local ' must be specified for proper operation. Unfortunately, this implies 'lport 1194' or another static port. This causes problems with stateful firewalls which register the host/port pairs in the internal connection tracking table. O