Re: OpenVPN issues on 5.0

2011-12-29 Thread Erling Westenvik
On Wed, Dec 28, 2011 at 08:02:54PM -0200, Christiano F. Haesbaert wrote: On Mon, Dec 26, 2011 at 08:57:18PM -0200, Christiano F. Haesbaert wrote: On Sun, Dec 25, 2011 at 04:10:19PM +0100, Erling Westenvik wrote: On Sat, Dec 24, 2011 at 07:50:53PM -0200, Christiano F. Haesbaert wrote:

Re: OpenVPN issues on 5.0

2011-12-28 Thread Christiano F. Haesbaert
On Mon, Dec 26, 2011 at 08:57:18PM -0200, Christiano F. Haesbaert wrote: On Sun, Dec 25, 2011 at 04:10:19PM +0100, Erling Westenvik wrote: On Sat, Dec 24, 2011 at 07:50:53PM -0200, Christiano F. Haesbaert wrote: Heya, can you paste me the output of: ifconfig acx0 hwfeatures

Re: OpenVPN issues on 5.0

2011-12-26 Thread Christiano F. Haesbaert
On Sun, Dec 25, 2011 at 04:10:19PM +0100, Erling Westenvik wrote: On Sat, Dec 24, 2011 at 07:50:53PM -0200, Christiano F. Haesbaert wrote: Heya, can you paste me the output of: ifconfig acx0 hwfeatures ifconfig url0 hwfeatures Sorry, but I'm not on -current. Are there other

Re: OpenVPN issues on 5.0

2011-12-25 Thread Erling Westenvik
On Sat, Dec 24, 2011 at 07:50:53PM -0200, Christiano F. Haesbaert wrote: Heya, can you paste me the output of: ifconfig acx0 hwfeatures ifconfig url0 hwfeatures Sorry, but I'm not on -current. Are there other ways to display such information?

Re: OpenVPN issues on 5.0

2011-12-23 Thread Erling Westenvik
Thanks. The last post on the thread of your supplied link, stated: when a packet comes from ral0 --- 10.0.0.1, the bridge changes the received interface to vr0, which has IFCAP_CSUM_IPv4. So when the icmp layer is about to test the checksum, it assumes the output interface is the

Re: OpenVPN issues on 5.0

2011-12-23 Thread Erling Westenvik
Solved! Or, since I don't really understand what is going on: solved.. I switched the roles for bge(4) and url(4) and all of a sudden everything started to work. I haven't tried to switch back to the non-working setup to verify, but please let me know if that would be of interest! Happy

Re: OpenVPN issues on 5.0

2011-12-22 Thread Janne Johansson
2011/12/22 Erling Westenvik erling.westen...@gmail.com: Sorry for bumping this here @ misc when my question propably belong to some OpenVPN forum, but it seems like no-one out there can say much on OpenVPN issues that appears to be OpenBSD spesific. What puzzles me is that I cannot make the

Re: OpenVPN issues on 5.0

2011-12-22 Thread Erling Westenvik
On Thu, Dec 22, 2011 at 09:40:47AM +0100, Janne Johansson wrote: 2011/12/22 Erling Westenvik erling.westen...@gmail.com: Sorry for bumping this here @ misc when my question propably belong to some OpenVPN forum, but it seems like no-one out there can say much on OpenVPN issues that appears

Re: OpenVPN issues on 5.0

2011-12-21 Thread Erling Westenvik
On Wed, Dec 14, 2011 at 06:28:55PM -0800, Johan Beisser wrote: On Wed, Dec 14, 2011 at 5:54 PM, Erling Westenvik erling.westen...@gmail.com wrote: After upgrading (re-installing from scratch) my firewall from 4.6 (or 4.7) to 5.0, I have not been able to get OpenVPN back working. Please

Re: OpenVPN issues on 5.0

2011-12-16 Thread Janne Johansson
2011/12/16 Erling Westenvik erling.westen...@gmail.com Links to foolproof HOWTO's will be much appreciated! Nature has thwarted all attempts to make such HOWTOs by make ever better fools, which probably is why you: ...but I have spent two days Googling, reading tons of HOWTO's and

Re: OpenVPN issues on 5.0

2011-12-16 Thread Stuart Henderson
On 2011-12-16, Erling Westenvik erling.westen...@gmail.com wrote: 11 antispoof quick for {lo,$int,$wap,$vpn} this may well not be helping.

Re: OpenVPN issues on 5.0

2011-12-15 Thread Kapetanakis Giannis
On 15/12/11 03:54, Erling Westenvik wrote: PROBLEM: Clients successfully connect to VPN server, receive proper dhcp addresses for both wlan and tunnel interfaces (and can reach the wlan subnet) but fail to reach the wired lan or internet. /var/log/messages indicates everything is up and

Re: OpenVPN issues on 5.0

2011-12-15 Thread Kenneth R Westerback
On Thu, Dec 15, 2011 at 03:59:29AM +0100, Erling Westenvik wrote: On Wed, Dec 14, 2011 at 06:28:55PM -0800, Johan Beisser wrote: On Wed, Dec 14, 2011 at 5:54 PM, Erling Westenvik erling.westen...@gmail.com wrote: After upgrading (re-installing from scratch) my firewall from 4.6 (or 4.7)

Re: OpenVPN issues on 5.0

2011-12-15 Thread Erling Westenvik
I'm running OpenBSD on eight machines here, from version 4.6 on one of them and version 4.9 and 5.0 on the rest, so I am quite used to different PF syntax. That being said: I have really only limited understanding of routing tables and other heavy technical stuff, but I'm stubborn and usually get

OpenVPN issues on 5.0

2011-12-14 Thread Erling Westenvik
After upgrading (re-installing from scratch) my firewall from 4.6 (or 4.7) to 5.0, I have not been able to get OpenVPN back working. Please forgive me for asking here at misc but I have spent two days Googling, reading tons of HOWTO's and trying out different solutions, but without being able to

Re: OpenVPN issues on 5.0

2011-12-14 Thread Johan Beisser
On Wed, Dec 14, 2011 at 5:54 PM, Erling Westenvik erling.westen...@gmail.com wrote: After upgrading (re-installing from scratch) my firewall from 4.6 (or 4.7) to 5.0, I have not been able to get OpenVPN back working. Please forgive me for asking here at misc but I have spent two days Googling,

Re: OpenVPN issues on 5.0

2011-12-14 Thread Erling Westenvik
On Wed, Dec 14, 2011 at 06:28:55PM -0800, Johan Beisser wrote: On Wed, Dec 14, 2011 at 5:54 PM, Erling Westenvik erling.westen...@gmail.com wrote: After upgrading (re-installing from scratch) my firewall from 4.6 (or 4.7) to 5.0, I have not been able to get OpenVPN back working. Please

Re: OpenVPN issues on 5.0

2011-12-14 Thread Erling Westenvik
Yeah, net.inet.ip.forwarding=1, but thanks. I should perhaps have made it more clear that my wired lan (192.168.3.0) works normally -- and my wireless too when without OpenVPN. I'm feeling quite stupid here, being more and more certain that the solution is very close. And very simple... On Wed,