Re: [Openvpn-users] Disconnects, maybe from "Bad source address" messages after connection

2015-04-18 Thread Jason Haar
On 19/04/15 12:05, Jeff Mitchell wrote: > > Unless the NAT implementation is broken. Read up a bit in the thread :-) > Ohh! :-) (but there are no broken NAT implementations! Say it ain't so!) -- Cheers Jason Haar Corporate Information Security Manager, Trimble Navigation Ltd. Phone: +1 408 4

Re: [Openvpn-users] Disconnects, maybe from "Bad source address" messages after connection

2015-04-18 Thread Jeff Mitchell
Unless the NAT implementation is broken. Read up a bit in the thread :-) On Sat, Apr 18, 2015, 20:00 Jason Haar wrote: > On 19/04/15 01:55, Gert Doering wrote: > > OTOH, you'll see the behaviour in many mobile networks today: if there > > is no traffic inside OpenVPN for a given time, like "60

Re: [Openvpn-users] Disconnects, maybe from "Bad source address" messages after connection

2015-04-18 Thread Jason Haar
On 19/04/15 01:55, Gert Doering wrote: > OTOH, you'll see the behaviour in many mobile networks today: if there > is no traffic inside OpenVPN for a given time, like "60 seconds" (yes, > that short), it will time out the NAT entry and on the next packet, you > end up with a new source port or sourc

Re: [Openvpn-users] Disconnects, maybe from "Bad source address" messages after connection

2015-04-18 Thread Gert Doering
Hi, On Fri, Apr 17, 2015 at 07:34:36AM -0400, Jeff Mitchell wrote: > So hopefully peer-id will fix this, but I think I'll have to send some > feelers out to the VirtualBox guys and see if they agree that this > sounds like some issue in their stack. It's definintely a bug in the NAT implementatio

Re: [Openvpn-users] Disconnects, maybe from "Bad source address" messages after connection

2015-04-18 Thread Gert Doering
Hi, On Thu, Apr 16, 2015 at 04:51:34PM -0400, Jeff Mitchell wrote: > Any idea when 2.3.7 will be cut? You said earlier that 2.3.7 would > have the fix (using peer-id) on the client side and git master has the > fix on the server side. Will the peer-id server-side component make it > in to 2.3.7 or

Re: [Openvpn-users] Unable to establish VPN

2015-04-18 Thread Gert Doering
Hi, On Fri, Apr 17, 2015 at 11:22:12AM -0400, Chris Ross wrote: > At this point, I now at least know what OpenSSL and crypto libraries my > openvpn binary is linked against and can speak more correctly about them. Just for the record - we added code in 2.3.4 or so which will actually tell you