Hi, On Thu, Feb 03, 2022 at 02:30:38PM +0100, Gert Doering wrote: > and server pushes this: > > 2022-02-03 14:28:24 PUSH: Received control message: 'PUSH_REPLY,route > 10.194.0.0 255.255.0.0,route-ipv6 fd00:abcd:194::/48,tun-ipv6,route > 10.194.2.1,topology net30,ping 10,ping-restart 30,compress lz4,ifconfig-ipv6 > fd00:abcd:194:2::100c/64 fd00:abcd:194:2::1,ifconfig 10.194.2.54 > 10.194.2.53,peer-id 0,cipher AES-256-GCM,key-derivation tls-ekm'
Looking more closely, this is followed by... 2022-02-03 17:34:29 PUSH: Received control message: 'PUSH_REPLY,route 10.194.0.0 255.255.0.0,route-ipv6 fd00:abcd:194::/48,tun-ipv6,route 10.194.2.1,topology net30,ping 10,ping-restart 30,compress lz4,ifconfig-ipv6 fd00:abcd:194:2::100c/64 fd00:abcd:194:2::1,ifconfig 10.194.2.54 10.194.2.53,peer-id 1,cipher AES-256-GCM,key-derivation tls-ekm' 2022-02-03 17:34:29 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set. 2022-02-03 17:34:29 OPTIONS IMPORT: timers and/or timeouts modified 2022-02-03 17:34:29 OPTIONS IMPORT: compression parms modified 2022-02-03 17:34:29 OPTIONS IMPORT: --ifconfig/up options modified 2022-02-03 17:34:29 OPTIONS IMPORT: route options modified 2022-02-03 17:34:29 OPTIONS IMPORT: peer-id set 2022-02-03 17:34:29 OPTIONS IMPORT: adjusting link_mtu to 1625 2022-02-03 17:34:29 OPTIONS IMPORT: data channel crypto options modified "adjusting link_mtu to 1625" which then maps to a tun_mtu of 1572, and 2022-02-03 17:34:29 /sbin/ifconfig tun0 10.194.2.54 10.194.2.53 mtu 1572 netmask 255.255.255.255 up Which happens in adjust_mtu_peerid() iff there is no --link-mtu in the config (which it isn't)... This binary is extremely stubborn about it, as in "even if I configure --tun-mtu 1490, I get a larger mtu configured afterwards". Maybe this is a transient effect which will disappear when all of the patchset is in... trying this next. gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel