Hi,
On 14/05/2026 21:53, Piotr Dobrogost wrote:
This (and also on the local LAN interface to see if they are actually
getting out).
[miner@hostx ~]$ sudo tcpdump -i enp5s0 icmp
dropped privs to tcpdump
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on enp5s0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
21:35:04.694647 IP hostx > xyz.sfx.pl: ICMP hostx udp port 46099
unreachable, length 141
21:35:05.718684 IP hostx > xyz.sfx.pl: ICMP hostx udp port 46099
unreachable, length 141
21:35:06.742366 IP hostx > xyz.sfx.pl: ICMP hostx udp port 46099
unreachable, length 141
21:35:07.766012 IP hostx > xyz.sfx.pl: ICMP hostx udp port 46099
unreachable, length 141
21:35:08.790908 IP hostx > xyz.sfx.pl: ICMP hostx udp port 46099
unreachable, length 141
This looks interesting, but please don't filter for "icmp", because on
the uplink interface you can't see what's inside the OpenVPN packets.
So here you are filtering for "outern ICMPs".
Please rather filter for "host xyz.sfx.pl" and do the test again.
Regards,
--
Antonio Quartulli
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
