-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Tuesday, December 7th, 2021 at 08:55, Aleksandar Ivanisevic 
<aleksan...@ivanisevic.de> wrote:

> Hi,
>
> I still see this in the server log, although I have mute-replay-warnings in 
> the server conf.
>
> Dec 6 08:39:58 xxx01 openvpn[2542576]: xxxx/xx.xx.xx.xx:38581 PID_ERR replay 
> [32] [SSL-0] [0000000000000000000000000000000000000000] 0:40 0:8 
> t=1638776398[0] r=[0,64,15,32,1] sl=[2
>
> 4,40,64,528]

I believe the reason is, the message above is a "Packet-ID Error", which 
--mute-replay-warnings does not mute.
There are other associated warnings, which are also not mutable.

A mutable replay warning is issued for duplicate packets only.

>
> Or does it have to be pushed/put in the client config?
No.  It cannot be pushed, because, if it were, a server could use it 
maliciously..

R

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAGBQJhr3OoACEJEE+XnPZrkLidFiEECbw9RGejjXJ5xVVVT5ec
9muQuJ1+3QgAuub0kbt/oN6RczTP7VnFp6zhLwsTfc5GMknir9abce8E/l0E
Prd13n4Jh17RcFL+cQd8lCW83+APH1VlZ6ftWvLfolFm4YBNtQ3OHLsACf0H
mydoxCre/qKst4SoRhAPeLhCzMLoegxm2HRLBSgano2LwVjQVAEhuYLKsjbB
7JZVS0gfr48yjf/bFnSqTI4YP6bi1UEU7T+SFcJb9b5G3zzX6uEWPebFnxK6
h1i0lJmasr05KiqNnv7qKOTVbO74BvHEjuDc70nxxcReOFxGjwAzUd4KAvm+
PriWcTbe1DwfbG6I07PU/FZ6C/YoRZTDbycupqthfDlc6a3cIgfSMA==
=yrZ4
-----END PGP SIGNATURE-----

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to