Re: [Openvpn-devel] [PATCH v2] Drop recursively routed packets

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/08/16 15:49, Gert Doering wrote: > David, please revert both release/2.3 and master, and we'll need > to rethink this, not using "is_ipv4()"... Done. - -- kind regards, David Sommerseth -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GN

[Openvpn-devel] Fwd: block-outside-dns and multiple tunnels

As usual forgot Cc: list -- Forwarded message -- From: Selva Nair Date: Tue, Aug 23, 2016 at 4:57 PM Subject: Re: [Openvpn-devel] block-outside-dns and multiple tunnels To: Gert Doering On Tue, Aug 23, 2016 at 4:44 PM, Gert Doering wrote: > On Tue, Aug 23, 2016 at 11:23:29AM

Re: [Openvpn-devel] block-outside-dns and multiple tunnels

On Tue, Aug 23, 2016 at 4:46 PM, Gert Doering wrote: > On Sat, Aug 06, 2016 at 12:04:39AM -0400, Selva Nair wrote: > [..] > > 2. Add all filters to a common custom sublayer. This requires a > pre-defined > > UUID that could be used to define the sublayer and shared between all > > instances of op

Re: [Openvpn-devel] block-outside-dns and multiple tunnels

Hi, specifically... On Sat, Aug 06, 2016 at 12:04:39AM -0400, Selva Nair wrote: [..] > 2. Add all filters to a common custom sublayer. This requires a pre-defined > UUID that could be used to define the sublayer and shared between all > instances of openvpn. > > For UUID, [..] > (b) hard code a

Re: [Openvpn-devel] block-outside-dns and multiple tunnels

Hi, On Tue, Aug 23, 2016 at 11:23:29AM -0400, Selva Nair wrote: > It was agreed to move this forward by looking into the approaches > suggested by Selva, and by giving him feedback. > > So what is the consensus? Should we support DNS through all tunnels for > which block-outside-dns is specified

[Openvpn-devel] broken link at https://community.openvpn.net/openvpn/wiki/BuildingUsingGenericBuildsystem

Hello, "Building TAP-Windows" link is broken. can we replace link with https://github.com/OpenVPN/tap-windows6 ? Cheers, Ilya Shipitsin -- ___ Openvpn-devel mailing list Openvpn

Re: [Openvpn-devel] [PATCH v2] Drop recursively routed packets

Hi, On Tue, Aug 23, 2016 at 03:49:55PM +0200, Gert Doering wrote: > David, please revert both release/2.3 and master, and we'll need to > rethink this, not using "is_ipv4()"... Ow, ow, this patch is not good... Turns out it also breaks p2p mode... Tue Aug 23 21:28:07 2016 us=528530 UDP link lo

[Openvpn-devel] what is "enable_distonly" for ?

Hello, I'm going to clean up currently unused nsis code in openvpn-gui. Also, I noticed "enable_distonly" configure option. what's that for ? Ilya Shipitsin -- ___ Openvpn-deve

Re: [Openvpn-devel] block-outside-dns and multiple tunnels

Hi, On 23 August 2016 at 17:23, Selva Nair wrote: > On Tue, Aug 16, 2016 at 1:42 PM, Selva Nair wrote: >> On Tue, Aug 16, 2016 at 12:41 PM, ValdikSS wrote: >>> >>> This is known issue (for me), and it was superficially discussed on IRC >>> at some point. It wasn't considered significant to impl

[Openvpn-devel] OpenVPN 2.3.12 released

The OpenVPN community project team is proud to release OpenVPN 2.3.12. It can be downloaded from here: This release includes many small improvements and fixes. This is the first release that actively discourages the use of 64-bit block c

Re: [Openvpn-devel] block-outside-dns and multiple tunnels

Hi, On Tue, Aug 16, 2016 at 1:42 PM, Selva Nair wrote: > Hi, > > On Tue, Aug 16, 2016 at 12:41 PM, ValdikSS wrote: > >> This is known issue (for me), and it was superficially discussed on IRC >> at some point. It wasn't considered significant to implement >> block-outside-dns for multiple conn

Re: [Openvpn-devel] Summary of today's (Monday, 22nd Aug 2016) community meeting

Hi, Following up on the IRC chatlog: On Mon, Aug 22, 2016 at 4:00 PM, Samuli Seppänen wrote: > Hi, > > Here's the summary of today's IRC meeting. > > snip.. > cron3, dazo, jamesyonan, mattock, OSTIF-Derek, syzzer, Thermi and > valdikss participated in this meeting. > > snip. > Discussed an

Re: [Openvpn-devel] [PATCH v2] Drop recursively routed packets

Hi, On Tue, Aug 23, 2016 at 03:43:36PM +0200, Gert Doering wrote: > ... which looks like "the IP header ends up where the ethernet header > should be" (every ping packet shows up as "new source address" on the > openvpn server). > > I have no idea what this could be, but since we want 2.3.12 out

Re: [Openvpn-devel] [PATCH v2] Drop recursively routed packets

Hi, On Mon, Aug 22, 2016 at 09:18:28PM +0200, Gert Doering wrote: > On Mon, Jan 04, 2016 at 02:43:44PM +0200, Lev Stipakov wrote: > > v2: better method naming [..] > > Trac #642 > > > > Signed-off-by: Lev Stipakov > > ACK. As stupid as this feels - we need to back this out again, because it br

Re: [Openvpn-devel] Win10 Tun Server +Standard W10 User +OVPN Interactive Service +OVPN GUI

Hi, On Tue, Aug 23, 2016 at 01:55:23AM +0100, debbie10t wrote: > I need to use --up/--down/--client-connect/disconnect et al .. You can, but they will run with the user privileges of the user that runs openvpn-gui by default. If you need more privileges, you need to run openvpn.exe or the gui wi

Re: [Openvpn-devel] [PATCH applied] Discourage using 64-bit block ciphers

Your patch has been applied to the branch commit c94b3ff0f5f1dbd4949f18f69ed3611f82a29021 Author: Steffan Karger Date: Tue Aug 16 16:45:42 2016 +0200 Discourage using 64-bit block ciphers Signed-off-by: Steffan Karger Acked-by: Arne Schwabe Message-Id: <1471358742-8773-1

Re: [Openvpn-devel] [PATCH applied] Discourage using 64-bit block ciphers

Your patch has been applied to the release/2.3 branch commit 610fdbbdb0abf65c1e7620143afccd62cd162a8f Author: Steffan Karger Date: Tue Aug 16 16:46:01 2016 +0200 Discourage using 64-bit block ciphers Signed-off-by: Steffan Karger Acked-by: Arne Schwabe Message-Id: <147135

[Openvpn-devel] [PATCH applied] Re: Drop recursively routed packets

Your patch has been applied to the following branches commit e9d64bc03742c96a3d7fe2a473c43d40e5ba2001 (master) commit 122469f5ad30b563cbefbc753d2a55af4227bb74 (release/2.3) Author: Lev Stipakov Date: Mon Jan 4 14:43:44 2016 +0200 Drop recursively routed packets Signed-off-by: Lev S

Re: [Openvpn-devel] [PATCH applied] Fix problems with NCP and --inetd.

Your patch has been applied to the master branch. commit d90249f73353c175ed9e7dd0a450cd084a729e20 Author: Gert Doering Date: Mon Aug 22 22:24:47 2016 +0200 Fix problems with NCP and --inetd. Trac: 715 Signed-off-by: Gert Doering Acked-by: Steffan Karger Message-Id:

Re: [Openvpn-devel] [PATCH v2] Fix problems with NCP and --inetd.

On 22 August 2016 at 22:24, Gert Doering wrote: > v2: wrap long msg() text lines Thanks. ACK. -Steffan -- ___ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net ht