[Openvpn-devel] OpenVPN 2.0 Multi-client and transparent bridged firewalling

2004-05-11 Thread Mike Auty
James, Our current setup is one where we have staff and clients using the VPN to connect into our network, staff for normal work, clients for remote troubleshooting. We'd like to block clients off from both each other and the main network with connection tracking so that they cannot make con

[Openvpn-devel] 2.0: public linux <- nat -> private win2k

2004-05-11 Thread Julien TOUCHE
i've test 2.0 beta 1 (both box) in the following setup linux (2.4)/debian, public IP | Router/nat | win2k, private IP it works well (connexion initiated like 1.6) but in a reliable way (ftp/http transfert ok, which was not the case with 1.x) but i have strange things in my log Tue May

Re: [Openvpn-devel] 2.0: public linux <- nat -> private win2k

2004-05-11 Thread Mike Auty
Hi, The "RWRWRRRWWWRWRRR" is related to transfer and traffic. It is because you have the line "verb 5" (or higher) in your config file. This is different from 1.x as far as I'm aware, and is simply debugging information (read up on the verb keyword for more information as to what level shows

Re: [Openvpn-devel] 2.0: public linux <- nat -> private win2k

2004-05-11 Thread Mike Auty
Actually, Reading the changelog, it appears this RWRRRWRrrWRW thing has been in since version 1.5-beta8: "* Modified the diagnostic --verb 5 debugging level to print 'R' for TCP/UDP read, 'W' for TCP/UDP write, 'r' for TUN/TAP read, and 'w' for TUN/TAP write." Not sure why I never notice

Re: [Openvpn-devel] 2.0: public linux <- nat -> private win2k

2004-05-11 Thread James Yonan
Julien TOUCHE said: > > i've test 2.0 beta 1 (both box) in the following setup > > linux (2.4)/debian, public IP > | > Router/nat > | > win2k, private IP > > it works well (connexion initiated like 1.6) but in a reliable way > (ftp/http transfert ok, which was not the case with 1.x

Re: [Openvpn-devel] OpenVPN 2.0 Multi-client and transparent bridged firewalling

2004-05-11 Thread James Yonan
Mike Auty said: > James, > Our current setup is one where we have staff and clients using the VPN > to connect into our network, staff for normal work, clients for remote > troubleshooting. We'd like to block clients off from both each other > and the main network with connection tracki

Re: [Openvpn-devel] 2.0: public linux <- nat -> private win2k

2004-05-11 Thread Julien TOUCHE
James Yonan wrote: That's just the --verb 5 debugging mode that shows packet flows through OpenVPN. Try using --verb 4 or lower to suppress that output. ok i've missed the changelog, thanks the pull options seems also to not work or is it only for "mode server" as i'm using "proto tcp-ser