Re: [Openvpn-users] update-resolv-conf script missing

2015-10-21 Thread Hongyi Zhao
On Mon, 19 Oct 2015 14:27:45 +0100, debbie10t wrote: > OpenVPN does NOT have a Debian Jesse Repo at http://swupdate.openvpn.net > so you did NOT install from the OpenVPN Repo. > > regards The OpenVPN is pre-packaged in the Debian's package repository of Jessie. You can install it from any of th

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
On Wed, Oct 21, 2015 at 5:39 PM, wrote: > Results you could have SHARED in the FIRST place .. > Go through the thread carefully -- I was the first to point out the conflict between persist-ip and multiple remotes. I tested this with 2.3.8 this morning seeing the OP's post, immediately replied t

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread debbie10t
- Original Message - From: "Selva Nair" To: "Debbie Tent" Cc: Sent: Wednesday, October 21, 2015 10:23 PM Subject: Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp > On Wed, Oct 21, 2015 at 5:11 PM, wrote: > >> >>> >> Why? Because of this line in the config: >>

[Openvpn-users] Fwd: client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
Hi, On Wed, Oct 21, 2015 at 4:59 PM, Erich Titl wrote: > Hi Folks > > sorry to chime in late (and unsolicited) > You are welcome. > > Am 21.10.2015 um 22:48 schrieb Gert Doering: > > Hi, > > > > On Wed, Oct 21, 2015 at 04:37:57PM -0400, Selva Nair wrote: > >> If I'm not mistaken, persist-remo

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
On Wed, Oct 21, 2015 at 5:11 PM, wrote: > >> >>> >> Why? Because of this line in the config: >>> >> >>> >> persist-remote-ip >>> >>> >> That will keep trying X:1194 only with whatever protocol is defined >>> >> before >>> >> those lines (or udp by default), if persist-remote-ip is also >> >>> spe

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread debbie10t
- Original Message - From: "Selva Nair" To: "Gert Doering" ; "Debbie Tent" Cc: Sent: Wednesday, October 21, 2015 9:37 PM Subject: Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp > Hi, > > On Wed, Oct 21, 2015 at 4:10 PM, wrote: > >> - Original Message - >

[Openvpn-users] Fwd: client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
Hi, On Wed, Oct 21, 2015 at 4:48 PM, Gert Doering wrote: > Hi, > > On Wed, Oct 21, 2015 at 04:37:57PM -0400, Selva Nair wrote: > > If I'm not mistaken, persist-remote-ip pre-dates connection-list support. > > With multiple options conditionally depending on each other, such > seemingly > > unexp

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Erich Titl
Hi Folks sorry to chime in late (and unsolicited) Am 21.10.2015 um 22:48 schrieb Gert Doering: > Hi, > > On Wed, Oct 21, 2015 at 04:37:57PM -0400, Selva Nair wrote: >> If I'm not mistaken, persist-remote-ip pre-dates connection-list support. >> With multiple options conditionally depending on ea

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Gert Doering
Hi, On Wed, Oct 21, 2015 at 04:37:57PM -0400, Selva Nair wrote: > If I'm not mistaken, persist-remote-ip pre-dates connection-list support. > With multiple options conditionally depending on each other, such seemingly > unexpected behaviour is no surprise.. Call it feature or a bug. The user > ask

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
Hi, On Wed, Oct 21, 2015 at 4:10 PM, wrote: > - Original Message - > From: "Gert Doering" > To: "Selva Nair" > > > > >> Why? Because of this line in the config: > >> > >> persist-remote-ip > > >> That will keep trying X:1194 only with whatever protocol is defined > >> before > >> thos

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
Hi Gert, Yes the problem remains (see below).. On Wed, Oct 21, 2015 at 2:50 PM, Gert Doering wrote: > hi, > On Wed, Oct 21, 2015 at 01:14:26PM -0400, Selva Nair wrote: > > Why? Because of this line in the config: > > > > persist-remote-ip > [..] > > That will keep trying X:1194 only with whatev

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread debbie10t
- Original Message - From: "Gert Doering" To: "Selva Nair" Cc: Sent: Wednesday, October 21, 2015 7:50 PM Subject: Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp >> Why? Because of this line in the config: >> >> persist-remote-ip >> That will keep trying X:1194 onl

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Gert Doering
hi, On Wed, Oct 21, 2015 at 01:14:26PM -0400, Selva Nair wrote: > Why? Because of this line in the config: > > persist-remote-ip [..] > That will keep trying X:1194 only with whatever protocol is defined before > those lines (or udp by default), if persist-remote-ip is also specified. > This is a

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
Hi, In case my previous reply was not clear enough: On Wed, Oct 21, 2015 at 3:21 AM, Stefan Szabo wrote: > config client: > > > remote 62.231.75.XX > port 80 > proto tcp wait 1 > > > remote 62.231.75.XX > port 1194 > proto udp wait 10 > > This will cause the client to first try 62.231.75.

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Selva Nair
On Wed, Oct 21, 2015 at 9:46 AM, Stefan Szabo wrote: > hi, > > without proto tcp declaration it doesnt try over tcp, all that is doing is > udp. > > if the first line is proto tcp, the first connection is over tcp, after > that jumps over UDP.UDP is tried for 5 times after that it resets from the

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Gert Doering
Hi, On Wed, Oct 21, 2015 at 04:46:34PM +0300, Stefan Szabo wrote: > without proto tcp declaration it doesnt try over tcp, all that is doing is > udp. > > if the first line is proto tcp, the first connection is over tcp, after that > jumps over UDP.UDP is tried for 5 times after that it resets f

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread debbie10t
- Original Message - From: "Stefan Szabo" To: Cc: Sent: Wednesday, October 21, 2015 2:46 PM Subject: Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp > without proto tcp declaration it doesnt try over tcp, all that is doing is > udp. >> proto tcp .. and other optio

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Stefan Szabo
the only thing that mybe you dont have is that i use ldap module for selecting users who must have acces. plugin /usr/lib64/openvpn/plugin/lib/openvpn-auth-ldap.so "/etc/openvpn/auth/ldap.conf” but i dont think this is a problem. tomorrow i will try a linux client, but as far i tested so far f

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Stefan Szabo
hi, without proto tcp declaration it doesnt try over tcp, all that is doing is udp. if the first line is proto tcp, the first connection is over tcp, after that jumps over UDP.UDP is tried for 5 times after that it resets from the beginning. the second declaration for remote is not parsed, it on

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread debbie10t
Hi - Original Message - From: "Stefan Szabo" To: "Gert Doering" Cc: Sent: Wednesday, October 21, 2015 8:21 AM Subject: Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp > openvpn server: OpenVPN 2.3.8 x86_64-redhat-linux-gnu > openvpn client: Tunnelblick 3.6beta10 (bu

Re: [Openvpn-users] client config fallback from 1194 udp to 80 tcp

2015-10-21 Thread Stefan Szabo
openvpn server: OpenVPN 2.3.8 x86_64-redhat-linux-gnu openvpn client: Tunnelblick 3.6beta10 (build 4400) config client: remote 62.231.75.XX port 80 proto tcp wait 1 remote 62.231.75.XX port 1194 proto udp wait 10 client dev tun resolv-retry infinite nobind persist-key persist-tun persist-rem