openvpn server: OpenVPN 2.3.8 x86_64-redhat-linux-gnu openvpn client: Tunnelblick 3.6beta10 (build 4400)
config client: <connection> remote 62.231.75.XX port 80 proto tcp wait 1 </connection> <connection> remote 62.231.75.XX port 1194 proto udp wait 10 </connection> client dev tun resolv-retry infinite nobind persist-key persist-tun persist-remote-ip cipher AES-128-CBC verb 3 auth-user-pass comp-lzo …………………….etc on my server in iptables reject all tcp from my source, in order to test the fallback in tunnelblick logs: 2015-10-21 10:19:05 TCPv4_CLIENT link remote: [AF_INET]62.231.75.XX:80 2015-10-21 10:19:05 MANAGEMENT: >STATE:1445411945,WAIT,,, 2015-10-21 10:19:05 Connection reset, restarting [0] and this is on and on, repeating.always choose 80 tcp, never jumps on udp 1194 > On 21 Oct 2015, at 09:52, Gert Doering <g...@greenie.muc.de> wrote: > > Hi, > > On Wed, Oct 21, 2015 at 08:42:57AM +0300, Stefan Szabo wrote: >> my question is why is not function the fallback mechanism from the cfg file, >> in my case the client continously use only port 80 tcp even if this port is >> DROP or REJECT with iptables on openvpn server. > > This works for me :-) - but since you have neither told us which version > of OpenVPN you are using nor provided a log (--verb 4), it's somewhat > hard to be more specific. > >> and also if i have two different openservers listen on the same port lets >> say 1194 udp, when the first is down, it will not jump on the second one. >> >> remote X 1194 >> remote Y 1194 > > Again, "works for me" (and everyone else) > > gert > -- > USENET is *not* the non-clickable part of WWW! > //www.muc.de/~gert/ > Gert Doering - Munich, Germany g...@greenie.muc.de > fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
signature.asc
Description: Message signed with OpenPGP using GPGMail
------------------------------------------------------------------------------
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
