Thanks, Yes I am using J. Nilo's statically linked, and including libssl & Libcrypt. I will check into upgrading the openvpn 1.6. (currently openvpn is 1.4.x I think.)
I hate to tack this on, but I am confused by the following link: http://slackerbit.ch/archives/2002/12/11/securing_wifi_with_openvpn.html Which generates an openvpn tunnel between a desktop and wireless laptop. In articles I have read that the beauty of TLS/SSL is that you don't need any particular application on a host. (For example Higgins, K. J., "Reconstructing the VPN," Network Computing, Vol. 15, No. 15, August 2004. Conry-Murray, A., "SSL VPNs: Remote Access for the Masses," Network Magazine, Vol. 8, No. 10, October 2003.) In link above there is an openvpn config running on both machines. Are the articles clueless or is there another way to do openvpn at a firewall by pointing a browser at port 5000? TIA Rick -----Original Message----- From: Martin Hejl [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 30, 2004 2:47 PM To: Tibbs, Richard Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] OPenvpn.lrp newbie Hi Richard, Tibbs, Richard wrote: > Dear list. > I am experimenting with openvpn.lrp. > I have loaded the following packages in addition to J. Nilos tun.o > module. > openvpn > libssl > libcrypt > > The firewall is otherwise functioning normally, I have web access, etc. > In daemon.log, openvpn does fine until the ifconfig command fails > Then openvpn exits. The relevant log lines are shown below and my > openvpn.conf is included. > (...) > > Nov 29 17:30:48 firewall openvpn[16040]: /sbin/ifconfig tun0 10.1.1.1 > pointopoint 10.1.10.2 mtu 1256 > Nov 29 17:30:48 firewall openvpn[16040]: Linux ifconfig failed: could > not execute shell command > Nov 29 17:30:48 firewall openvpn[16040]: Exiting Just a wild guess - but do you actually have the ifconfig binary in /sbin? It's not part of the standard Bering install, and apparently the version you're using still needs ifconfig. I wrote a patch for it to support "ip" instead of "ifconfig" which got included into the 1.6 release of OpenVPN. Maybe one of the Bering developers can update the package, if there's enough demand. I'm assuming you're using the openvpn package from http://leaf.sourceforge.net/devel/jnilo/ - which looks like a statically linked version (meaning, you'll most likely not need libssl and libcrypt) Of course, if you're not using the openvpn package from http://leaf.sourceforge.net/devel/jnilo/ but rather one from another source, none of this applies. Martin ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
