Re: [Openvpn-devel] [PATCH] Added two features to Network AddressTranslator

2015-08-27 Thread Gert Doering
Hi, On Thu, Aug 27, 2015 at 08:06:27PM +0100, debbie...@gmail.com wrote: > > On Thu, Aug 27, 2015 at 5:58 AM, Gert Doering wrote: > > >> (and I'd totally not run important service stuff on windows). > > In the UK, Tesco run their self-service checkouts on Windows. I'm not Tesco, and I do not p

Re: [Openvpn-devel] [PATCH] Added two features to Network AddressTranslator

2015-08-27 Thread debbie10t
On Thu, Aug 27, 2015 at 5:58 AM, Gert Doering wrote: (and I'd totally not run important service stuff on windows). In the UK, Tesco run their self-service checkouts on Windows. regarrds

Re: [Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-27 Thread Marvin
In certain cases we did exactly that. We used a linux appliance optimized as a router + OpenVPN. But the instances where we could get away with that is a small percentage of our installed base. Unfortunately the majority of those sites require the Windows box because of other requisite proprieta

[Openvpn-devel] [PATCH] Replace unaligned 16bit access to TCP MSS value with bytewise access

2015-08-27 Thread Gert Doering
TCP options are not always word-aligned, and accessing a 16bit value at an odd memory address will cause a "bus error" crash on some architectures, e.g. Linux/Sparc(64) Trac #497 Signed-off-by: Gert Doering --- src/openvpn/mss.c | 17 - 1 file changed, 8 insertions(+), 9 deletio

Re: [Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-27 Thread Gert Doering
Hi, On Thu, Aug 27, 2015 at 09:18:12AM +1200, Jason Haar wrote: > On 26/08/15 20:35, Arne Schwabe wrote: > > Okay yes. Active FTP is broken by our simple nat implementation. But I > > think FTP, let alone active FTP is dead. I am not sure if we should > > support this in our simple NAT implementat