On 11/26/2018 01:27 PM, Christophe Pfeifer wrote:
Yes, you are right, it is a binary.
I commented out these lines to no avail.
Then, I tried to locate the openvpn config file used by NordVPN's binary.
Unfortunately, the file given in openvpn command line is removed just after it
is launched...
Afterwards, I checked the NordVPN's logs. Indeed, there are hints that the
tun-mtu has been negotiated.
Finally, I just reduced the tun-mtu to 1325, and it worked for UDP connections!
I didn't find any suitable values for TCP connections, but I'll go with this.
In my opinion, it is more a Qubes proxyVM-related issue, rather than bad
NordVPN's config files. It seems that when the VPN is in a separate VM, it does
not take into account ICMP packets, and therefore is unable to dynamically
adapt some parameters.
Thanks for your help, I feel secure on the Internet when checking my encrypted
mailbox now!
Christophe
Interesting... Thanks for the valuable feedback!
--
Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/00351ab5-4fb3-0d23-2d03-70aac66911d6%40posteo.net.
For more options, visit https://groups.google.com/d/optout.
