Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-24 Thread Gert Doering
Hi, On Thu, Jun 23, 2016 at 02:42:18PM -0400, Selva Nair wrote: > > So, now we have 4 different remotes. You're scaling the exponent by 1/4 > > here, so the retry timer would be > > > > 5s 5s 5s 5s 10s 10s 10s 10s 20s 20s 20s 20s ... > > > > then (or, phrased differently, "one round uses the un

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-23 Thread Selva Nair
On Thu, Jun 23, 2016 at 1:52 PM, Gert Doering wrote: > On Sat, Jun 18, 2016 at 03:41:22PM -0400, Selva Nair wrote: > > > > This is possible, but the case for progressively increasing the > restart > > > > pause is not very strong. Can we get some feedback from people who > serve > > > > 1000's of

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-23 Thread Gert Doering
HI, On Sat, Jun 18, 2016 at 03:41:22PM -0400, Selva Nair wrote: > > > This is possible, but the case for progressively increasing the restart > > > pause is not very strong. Can we get some feedback from people who serve > > > 1000's of users? > > > > I would generally consider it polite behaviour

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-18 Thread Selva Nair
Hi, On Fri, Jun 10, 2016 at 12:55 PM, Gert Doering wrote: > On Fri, Jun 10, 2016 at 12:43:20PM -0400, Selva Nair wrote: > > > @Selva, Arne: can we make the reconnect logic somewhat smarter overall, > > > like > > > "if reconnecting to the same host, wait 30 seconds instead of 5"? > > > > This is

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread Gert Doering
Hi, On Fri, Jun 10, 2016 at 12:43:20PM -0400, Selva Nair wrote: > > @Selva, Arne: can we make the reconnect logic somewhat smarter overall, > > like > > "if reconnecting to the same host, wait 30 seconds instead of 5"? > > This is possible, but the case for progressively increasing the restart >

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread Gert Doering
Hi, On Fri, Jun 10, 2016 at 02:54:39PM +0100, debbie10t wrote: > On 10/06/16 14:38, Gert Doering wrote: > > On Fri, Jun 10, 2016 at 02:34:26PM +0100, debbie10t wrote: > >> VPNB modifies VPNA client configs to include > >> --pull-filter reject "" > > How would VPNB do that? > Download it, modify it

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread Selva Nair
Hi, On Fri, Jun 10, 2016 at 12:21:33PM +0100, debbie10t wrote: > > If the server pushes an item the client rejects then > > the client will just reconnect endlessly, completing a > > full reconnect to the server then restarting ! > > Thispractically constitutes a DDOS .. The logic used with rej

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread debbie10t
On 10/06/16 14:38, Gert Doering wrote: Hi, On Fri, Jun 10, 2016 at 02:34:26PM +0100, debbie10t wrote: VPNB modifies VPNA client configs to include --pull-filter reject "" How would VPNB do that? Download it, modify it and distribute it to their attack bots. This is a client decision. As wi

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread Gert Doering
Hi, On Fri, Jun 10, 2016 at 02:34:26PM +0100, debbie10t wrote: > VPNB modifies VPNA client configs to include > --pull-filter reject "" How would VPNB do that? And what would stop them from just inserting any of the other options (like, the x509 validation stuff) that leads to "this server stink

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread debbie10t
Hi, On 10/06/16 13:54, Gert Doering wrote: Hi, On Fri, Jun 10, 2016 at 12:21:33PM +0100, debbie10t wrote: today I successfully built git-master for windows x86_64 and started testing the new features. You will be pleased to know that everything works well (as far as my limited knowledge and t

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread Gert Doering
Hi, On Fri, Jun 10, 2016 at 12:21:33PM +0100, debbie10t wrote: > today I successfully built git-master for windows x86_64 > and started testing the new features. > > You will be pleased to know that everything works well > (as far as my limited knowledge and testing goes) > > However, why does p

[Openvpn-devel] pull-filter reject = server hammering !

2016-06-10 Thread debbie10t
Hi, today I successfully built git-master for windows x86_64 and started testing the new features. You will be pleased to know that everything works well (as far as my limited knowledge and testing goes) However, why does pull-filter reject throw SIGUSER1 ? If the server pushes an item the cli