Hi,

On Sat, Jul 07, 2018 at 06:55:44PM +0000, Kristian McColm wrote:
> I tried setting "mtu-disc yes" in the VPN server but it didn???t appear to 
> have any affect. Do you have any advice on how to handle this scenario?

mssfix 1300

(won't do anything for large UDP packets inside the tunnel, but will 
fix TCP.  If you really need large UDP, try --fragment 1400 - but this
needs to be turned on on both sides, OpenVPN server and client, and will
cause some overhead)

The "I have no IPv4 default route so my local 464 component messes up
IPv4 connections through the tunnel" is annoying, but not truly surprising.

(And the real culprit here is "Apps using IPv4 literals" - those are 
the ones to blaim that apple had to add that local "DNS64-like" component
for IPv4 literals - which is now breaking the same apps in a VPN context)

But if "push default route" works as a workaround, this can be documented
and things will be fine...

gert


-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to