Re: [Openvpn-users] Challenge/response questions

2018-06-28 Thread David Sommerseth
On 27/06/18 23:56, Jonathan K. Bullard wrote: > Hi. > > I'm hoping to implement challenge/response ("CR") in Tunnelblick (GUI > for OpenVPN on macOS) and have some questions after reading the > documentation [1]; I don't know all the details of the static and dynamic challenge implementation, but

Re: [Openvpn-users] br0: received packet on tap0 with own address as source address

2018-06-28 Thread freebsd
Hello Gert, I was thinking on the same. Here is some traffic dump (on tap0) run on the Server where 192.168.5.4 is the address of the Server on br0: 10:14:43.593256 1e:6f:f0:1a:74:2f > 01:00:5e:00:00:01, ethertype IPv4 (0x0800), length 46: 0.0.0.0 > 224.0.0.1: igmp query v2 10:15:01.674472 1

Re: [Openvpn-users] Challenge/response questions

2018-06-28 Thread Selva Nair
Hi, Currently OpenVPN core supports dynamic CR from console input and the Windows OpenVPN-GUI also supports it. The following comments are based on those implementations: On Wed, Jun 27, 2018 at 5:56 PM, Jonathan K. Bullard wrote: > > Hi. > > I'm hoping to implement challenge/response ("CR") in

Re: [Openvpn-users] Challenge/response questions

2018-06-28 Thread Jonathan K. Bullard
Hi, David. Thanks for all the info. Very helpful. On Thu, Jun 28, 2018 at 5:21 AM, David Sommerseth wrote: > On 27/06/18 23:56, Jonathan K. Bullard wrote: >> Hi. >> >> I'm hoping to implement challenge/response ("CR") in Tunnelblick (GUI >> for OpenVPN on macOS) and have some questions after read

Re: [Openvpn-users] Challenge/response questions

2018-06-28 Thread Jonathan K. Bullard
Hi, Selva. Thanks. Comments below. On Thu, Jun 28, 2018 at 11:56 AM, Selva Nair wrote: > Hi, > > Currently OpenVPN core supports dynamic CR from console input > and the Windows OpenVPN-GUI also supports it. The following > comments are based on those implementations: > > On Wed, Jun 27, 2018 at 5

Re: [Openvpn-users] Challenge/response questions

2018-06-28 Thread Selva Nair
Hi On Thu, Jun 28, 2018 at 4:28 PM, Jonathan K. Bullard wrote: >>> 2. In Dynamic CR, what is the purpose of _not_ requiring a response? >>> Is it to display a message without a text input box and have the user >>> only able to click "OK" or "Cancel" (and disconnect if the user clicks >>> "Cancel

[Openvpn-users] still Local dns is using

2018-06-28 Thread Med. Inventor
Why still local DNS is used? OpenVPN 2.4.4 x86_64-pc-linux-gnu .ovpn file: client dev tun proto udp sndbuf 0 rcvbuf 0 remote uk.ov2add.com 800 resolv-retry infinite nobind persist-key persist-tun remote-cert-tls server auth SHA512 cipher AES-128-CBC comp-lzo setenv opt block-outside-dns key-direct

Re: [Openvpn-users] weird Win2012 client issue

2018-06-28 Thread Jason Haar
I've thrown the win2K12 away - moved the existing config directory to Win10 and it "just worked". No idea what was really behind this issue - no worse off with Win10 - so forwards I go ;-) On Wed, Jun 27, 2018 at 8:39 AM Selva Nair wrote: > Hi, > > On Tue, Jun 26, 2018 at 3:36 PM, Jason Haar >

Re: [Openvpn-users] still Local dns is using

2018-06-28 Thread Gert Doering
Hi, On Fri, Jun 29, 2018 at 07:18:20AM +0430, Med. Inventor wrote: > Why still local DNS is used? > OpenVPN 2.4.4 x86_64-pc-linux-gnu On Linux, you need to have a helper script (called by "up $script" after connection setup) to install new DNS entries. How that script is called and where it is f