Re: [Openvpn-users] Server vs Client cert generation

2017-08-29 Thread debbie10t
Hi, snippety-snipped ;) On 29/08/17 21:06, Gregory Sloop wrote: > Any insight you can shed here would be fab. [Or anyone else, for that matter.] > Re: verify-x509-name > [Or use the "-name-prefix" option in --verify-x509-name technically, that is "name-prefix" The example in the manual

Re: [Openvpn-users] explicit-exit-notify is ignored by previous blocks.

2017-08-24 Thread debbie10t
On 24/08/17 11:23, Eike Lohmann wrote: Hi, with openvpn 2.4.x client and server I get this notice/error in my clientlogs: Thu Aug 24 12:15:29 2017 *Option 'explicit-exit-notify' in [PUSH-OPTIONS]:7 **is ignored by previous blocks* I believe this simply infers that 'previous' "blocks"

[Openvpn-users] Exhibiting at freenode #live

2017-07-17 Thread debbie10t
Hi, just curious, is anybody in the UK interested in this on behalf of openvpn f.o.s.s. http://freenode.net/news/freenode-live-exhibit thanks -- Check out the vibrant tech community on one of the world's most engaging

Re: [Openvpn-users] VPN clients disconnecting since 2.4

2017-07-17 Thread debbie10t
On 17/07/17 17:17, Geert Lorang wrote: Hi, If needed I can provide the entire configs. configs and logs at --verb 4 (sanitized) In advance of that, are you using (default) --cipher BF-CBC ? because that will force renegotiation after 64MB data. regards

Re: [Openvpn-users] OpenVPN 2.4.3 OpenSSL: error:0607A082

2017-06-29 Thread debbie10t
On 29/06/17 14:06, debbie10t wrote: On 29/06/17 08:55, Philipp Helo Rehs wrote: Do you have any idea to fix this? You probably want to use --ncp-disable for your particular setup because *you* do not want to negotiate your ciphers

Re: [Openvpn-users] OpenVPN 2.4.3 OpenSSL: error:0607A082

2017-06-29 Thread debbie10t
On 29/06/17 08:55, Philipp Helo Rehs wrote: Hello, i am running Redhat 7 and use openvpn 2.4.3 from epel but i have got a big problem since the update from 2.3.x Jun 28 18:32:38 vpn openvpn-zuvsupport[23218]: TCP connection established with [AF_INET]x.x.x.x:39682 Jun 28 18:32:39 vpn

Re: [Openvpn-users] Combining redirect-gateway with block-outside-dns

2017-06-21 Thread debbie10t
Never mind .. of course it would not block dns otherwise private VPNs could not use google dns etc. On 21/06/17 15:50, debbie10t wrote: Hi Ref: https://forums.openvpn.net/viewtopic.php?f=6=24318 (Not interested in a solution for it, just for info) Details of *my* question: Server.conf

[Openvpn-users] Combining redirect-gateway with block-outside-dns

2017-06-21 Thread debbie10t
Hi Ref: https://forums.openvpn.net/viewtopic.php?f=6=24318 (Not interested in a solution for it, just for info) Details of *my* question: Server.conf: push "redirect-gateway def1 block-local" push "dhcp-option DNS 10.100.0.X" push "block-outside-dns" Note: 1. There is no push "route

Re: [Openvpn-users] Packet flow and ICMP/MTU question

2017-06-14 Thread debbie10t
On 14/06/17 22:25, Pippin1st via Openvpn-users wrote: Then changed it twice to correct the order of comp/frag/enc. and traffic NOT passing routing & iptables from OpenVPN to tun and back. Attached new diagram no.4 You could share the source document (eg. open-office draw) and authoritative

Re: [Openvpn-users] building for ARM using buildsystem document bug (Closed)

2017-05-31 Thread debbie10t
Sorry .. this should have gone to openvpn-devel. I went ahead and made the change to the wiki page. regards On 31/05/17 16:16, debbie10t wrote: Hi, Source: https://community.openvpn.net/openvpn/wiki/BuildingUsingGenericBuildsystem#BuildingOpenVPNanditsdependencies If you get an error

[Openvpn-users] building for ARM using buildsystem document bug

2017-05-31 Thread debbie10t
Hi, Source: https://community.openvpn.net/openvpn/wiki/BuildingUsingGenericBuildsystem#BuildingOpenVPNanditsdependencies If you get an error complaining about missing libpam, add --disable-plugin-auth-pam to generic/build.vars:

Re: [Openvpn-users] openvpn server / Windows Server 2016 Standard / assign server IP problem

2017-05-16 Thread debbie10t
On 16/05/17 20:30, David Sommerseth wrote: > On 16/05/17 19:04, debbie10t wrote: >> >> >> On 16/05/17 17:36, David Sommerseth wrote: >>> On 16/05/17 15:53, debbie10t wrote: >>>> Hi, >>>> >>>> https://forums.openvpn.net/viewtop

Re: [Openvpn-users] openvpn server / Windows Server 2016 Standard / assign server IP problem

2017-05-16 Thread debbie10t
On 16/05/17 17:36, David Sommerseth wrote: > On 16/05/17 15:53, debbie10t wrote: >> Hi, >> >> https://forums.openvpn.net/viewtopic.php?f=4=24108 >> >> Gist: >> >> Openvpn appears to fail to assign vpn server ip >> but still has ini

[Openvpn-users] openvpn server / Windows Server 2016 Standard / assign server IP problem

2017-05-16 Thread debbie10t
Hi, https://forums.openvpn.net/viewtopic.php?f=4=24108 Gist: Openvpn appears to fail to assign vpn server ip but still has initialization complete. config and log --verb 4 are in the thread. I cannot figure out what is going wrong, so asking for some fresh eyes to have a look. Thanks

Re: [Openvpn-users] Build-System ./build-complete --build-depcache

2017-05-08 Thread debbie10t
On 08/05/17 15:34, Samuli Seppänen wrote: > Hi, > > On 08/05/2017 16:50, debbie10t wrote: >> Hi, >> >> Build-System ./build-snapshot = works >> Build-System ./build-complete = works >> Build-System ./build-complete --build-depcache does not appear to

[Openvpn-users] Build-System ./build-complete --build-depcache

2017-05-08 Thread debbie10t
Hi, Build-System ./build-snapshot = works Build-System ./build-complete = works Build-System ./build-complete --build-depcache does not appear to work. OS: Welcome to Ubuntu 16.04.2 LTS (GNU/Linux 4.4.0-75-generic x86_64) * Documentation: https://help.ubuntu.com * Management:

Re: [Openvpn-users] Win10 default gateway not being redirected

2017-04-24 Thread debbie10t
On 24/04/17 15:07, David Mehler wrote: > Hello, > > I'm running 2.4 versions of Openvpn on both the server and a windows client. > > I'm wanting to route all traffic through the vpn. I've got this on the server: > > push "redirect-gateway def1 bypass-dhcp" > push "dhcp-option DNS 208.67.222.222"

[Openvpn-users] Windows 10 sleep and TAP driver problem

2017-04-12 Thread debbie10t
Hi, requesting some expert help because this thread could be useful to the community if the problem can be properly diagnosed before fixing. Ref: https://forums.openvpn.net/viewtopic.php?f=6=23883 Essentially, the windows TAP driver appears to have suffered from windows sleep problem which has

[Openvpn-users] TLS Error: Unroutable control packet received

2017-03-02 Thread debbie10t
From this thread: https://forums.openvpn.net/viewtopic.php?f=6=23526=68435#p68421 In the previous posts on that thread the OP had certificate errors (ssl3_get_server_certificate:certificate verify failed) but the OP appears to have managed to rectify that error .. This is openvpn on pfSense

Re: [Openvpn-users] Windows openvpnservice (openvpnserv2) starting of its own accord ?

2017-02-20 Thread debbie10t
On 20/02/17 22:04, Selva Nair wrote: > On Mon, Feb 20, 2017 at 4:50 PM, debbie10t <debbie...@gmail.com> wrote: > >> >>> Use msconfig to disable startup processes and/or services to isolate the >>> what causes this. You will have to reboot several times using

Re: [Openvpn-users] Windows openvpnservice (openvpnserv2) starting of its own accord ?

2017-02-20 Thread debbie10t
On 20/02/17 20:22, Selva Nair wrote: > On Mon, Feb 20, 2017 at 3:01 PM, debbie10t <debbie...@gmail.com> wrote: > >> >>> >>> Any scheduled tasks (taskschd) that could be starting it? >>> >> >> Nothing in Windows Scheduled Tasks other than

Re: [Openvpn-users] Windows openvpnservice (openvpnserv2) starting of its own accord ?

2017-02-20 Thread debbie10t
On 20/02/17 17:46, Samuli Seppänen wrote: > On 20/02/2017 19:32, debbie10t wrote: >> >> >> On 20/02/17 16:36, Samuli Seppänen wrote: >>> On 20/02/2017 17:09, Samuli Seppänen wrote: >> >>>> >>>> Debbie10t: can you launch Powershell and

Re: [Openvpn-users] Windows openvpnservice (openvpnserv2) starting of its own accord ?

2017-02-20 Thread debbie10t
On 20/02/17 16:36, Samuli Seppänen wrote: > On 20/02/2017 17:09, Samuli Seppänen wrote: >> >> Debbie10t: can you launch Powershell and issue >> >> Get-WMIObject -Class win32_service -Filter "Name='OpenVPNService'" >> >> With default sett

Re: [Openvpn-users] Windows openvpnservice (openvpnserv2) starting of its own accord ?

2017-02-20 Thread debbie10t
On 20/02/17 13:09, Gert Doering wrote: > Hi, > > On Mon, Feb 20, 2017 at 12:44:37PM +, debbie10t wrote: >> I am a little bit rusty with windows and I can't figure out how this is >> happening. >> >> Computer is Windows 7 Home >> >> Openvpn 2

Re: [Openvpn-users] Windows openvpnservice (openvpnserv2) starting of its own accord ?

2017-02-20 Thread debbie10t
On 20/02/17 13:09, Gert Doering wrote: > Hi, > > On Mon, Feb 20, 2017 at 12:44:37PM +, debbie10t wrote: >> I am a little bit rusty with windows and I can't figure out how this is >> happening. >> >> Computer is Windows 7 Home >> >> Openvpn 2

[Openvpn-users] Windows openvpnservice (openvpnserv2) starting of its own accord ?

2017-02-20 Thread debbie10t
Hi, I am a little bit rusty with windows and I can't figure out how this is happening. Computer is Windows 7 Home Openvpn 2.4.0 standard install + easyrsa Openvpn Interactive service = Auto, does start at logon OK Openvpn Legacy service = Manual, does *not* start at logon OK Openvpn service

Re: [Openvpn-users] Auth against Windows Server

2017-02-15 Thread debbie10t
On 15/02/17 13:38, Jan Just Keijser wrote: > On 15/02/17 14:20, debbie10t wrote: >> Hi, >> >> I am curious if it is possible to auth a VPN user against >> a windows account ? >> >> I do not know of any plugin for this, are there any ? >> >> My g

[Openvpn-users] Auth against Windows Server

2017-02-15 Thread debbie10t
Hi, I am curious if it is possible to auth a VPN user against a windows account ? I do not know of any plugin for this, are there any ? My guess would be a script/batch file on the vpn server which does some auth against windows server or AD. Any general pointers would be appreciated. Thanks

Re: [Openvpn-users] DNS leak under Debian Testing

2017-02-09 Thread debbie10t
On 09/02/17 12:01, Matthias Müller wrote: > However, I don't know how to compile the down-root plugin -- I cloned the > repo and the README says I should simply invoke "make". But there is no > "Makefile" in the src/plugins/down-root directory, only "Makefile.am". > "automake" or "autoreconf"

Re: [Openvpn-users] 2.4.0 , address on tun inteface problem after reconnect to another server, linux

2017-01-26 Thread debbie10t
On 26/01/17 11:55, Dmitry Melekhov wrote: > 26.01.2017 15:31, debbie10t пишет: >> >> On 26/01/17 07:10, Dmitry Melekhov wrote: >>> 26.01.2017 10:59, Gert Doering пишет: >>>> Hi, >>>> >>>> On Thu, Jan 26, 2017 at 09:54:59AM +0400, Dmi

Re: [Openvpn-users] 2.4.0 , address on tun inteface problem after reconnect to another server, linux

2017-01-26 Thread debbie10t
On 26/01/17 07:10, Dmitry Melekhov wrote: > 26.01.2017 10:59, Gert Doering пишет: >> Hi, >> >> On Thu, Jan 26, 2017 at 09:54:59AM +0400, Dmitry Melekhov wrote: >>> Could you tell me is this expected behavior and, if yes, is there any >>> workaround , something like dhcp-release for windows? >>

Re: [Openvpn-users] Problems setting up dual-stack OpenVPN server on a Windows 10 host

2017-01-17 Thread debbie10t
I also meant to include this: https://community.openvpn.net/openvpn/wiki/IPv6 Other than that, there is nothing special about my configuration. I believe your problem is related to the "VPN Service" you are using. We can only provide limited help with that and will require your client config

Re: [Openvpn-users] Problems setting up dual-stack OpenVPN server on a Windows 10 host

2017-01-17 Thread debbie10t
.php?f=7=22811 > > > Regards, > > Daryl > > > > From: Daryl Morse [mailto:daryl_mo...@telus.net] > Sent: Thursday, November 24, 2016 11:04 PM > To: openvpn-users@lists.sourceforge.net > Cc: 'debbie10t' <debbie...@gmail.com> > Subject: RE:

Re: [Openvpn-users] Recommendations for maximum cryptographic security

2016-12-14 Thread debbie10t
On 14/12/16 14:40, Jan Just Keijser wrote: > Hi, > > David's remarks are correct. I've added some small nuances below, but > overall the answers do not change. > > On 14/12/16 12:40, David Sommerseth wrote: >> On 14/12/16 07:54, Kevin Long wrote: >>> 1. Use easy-rsa3 or equivalent openssl

Re: [Openvpn-users] Sonicwall access rule weirdness or broken client/server?

2016-11-27 Thread debbie10t
Hi, On 28/11/16 00:54, John Baker wrote: > Hi, > > I've been using openvpn with at tunnelblick client for about a decade and > I've had the server running in an OpenVZ container with Ubuntu 14.04.5 LTS > for the last couple of years. I use it constantly every day and it's been > working. > >

[Openvpn-users] IPv6 --dev-node error not correctly identified

2016-11-22 Thread debbie10t
Hi, this may be related to another trac but i could not find a suitable ticket, so posting here first for advice. It is a bit of a "corner case" but is is an error none the less. Client WinXP-SP2(etc) Openvpn v2.3.13 NOTE#1: The TAP device named "defaultc" does *not* exist on the client.

Re: [Openvpn-users] Questions / help on setting up Openvpn

2016-10-25 Thread debbie10t
Tsunami Warning ! On 25/10/16 22:35, Leonardo Rodrigues wrote: > > Em 25/10/16 18:47, Steve Frazier escreveu: >> Is this list for asking questions for newbies setting up OpenVPN or >> for something else? >> >> > > There's no limitation on newbies or expert only questions. However, >

Re: [Openvpn-users] --port-share and Fail2ban

2016-10-11 Thread debbie10t
On 11/10/16 20:39, David Sommerseth wrote: > On 11/10/16 17:42, debbie10t wrote: > [...snip...] >> That reads to me as: >> ovpn-2.3.2 forwards the packet with the source IP of the client ! >> >> That is why I was more than usually curious .. >> Is it lik

Re: [Openvpn-users] --port-share and Fail2ban

2016-10-11 Thread debbie10t
Hi, On 11/10/16 17:14, Jan Just Keijser wrote: > > HTH, > > JJK > Thanks very much for your help JJK, for now I will quote your replies to the forum (as mailing list is a bit 'up in the air') Also, thanks for your new diagnostic tool, in future I will consider compiling the old source if

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-06 Thread debbie10t
The openvpn installer has two undocumented command line parameters: /S = silent /D directory = destination directory http://superuser.com/questions/998497/is-it-possible-to-install-tap-windows-virtual-openvpn-network-driver-in-silent regards On 06/09/16 08:34, Gert Doering wrote: > Hi, > >

Re: [Openvpn-users] Howto install a native binary built with build-system ?

2016-08-30 Thread debbie10t
On 30/08/16 15:40, Samuli Seppänen wrote: > >> >> On 22/08/16 18:23, Samuli Seppänen wrote: >>>> >>>> >>>> On 22/08/16 17:18, debbie10t wrote: >>>>> >>>>> >>>>> On 22/08/16 16:55, debbie10t wrote:

Re: [Openvpn-users] Howto install a native binary built with build-system ?

2016-08-30 Thread debbie10t
On 22/08/16 18:23, Samuli Seppänen wrote: >> >> >> On 22/08/16 17:18, debbie10t wrote: >>> >>> >>> On 22/08/16 16:55, debbie10t wrote: >>>> Hi, >>>> >>>> I have built openvpn on debain8 using t

[Openvpn-users] All clients disconnect when user inputs incorrect password

2016-08-30 Thread debbie10t
Hi, All clients disconnect when user inputs incorrect password please see this thread: https://forums.openvpn.net/viewtopic.php?f=4=22363 I am asking here to find out if this is a known problem or not. I know that there is some issue where by the server instance only services one client at a

Re: [Openvpn-users] Client as exit point?

2016-08-22 Thread debbie10t
Hi, Presumably, you have enabled IP forwarding on the GW client ? often forgotten .. On 22/08/16 18:15, Dreetjeh D wrote: > Hello, > > > Yes, that`s what I mean. > > Ideally the Window 7 machine would use the OVPN-Client as GW/exit point "on > the fly" > > With on the fly I mean, VPN-ON.cmd

Re: [Openvpn-users] Howto install a native binary built with build-system ?

2016-08-22 Thread debbie10t
On 22/08/16 17:18, debbie10t wrote: > > > On 22/08/16 16:55, debbie10t wrote: >> Hi, >> >> I have built openvpn on debain8 using the build-system >> but I do not know what to do with the resulting *bin.tar.bz2 >> >> Is this a case of learning h

[Openvpn-users] Howto install a native binary built with build-system ?

2016-08-22 Thread debbie10t
Hi, I have built openvpn on debain8 using the build-system but I do not know what to do with the resulting *bin.tar.bz2 Is this a case of learning how to create a .deb file ? Any pointers appreciated, thanks. -- --

Re: [Openvpn-users] 2.3.10 work 2.3.11 throws TLS error

2016-08-22 Thread debbie10t
Thank you for all your replies, this one feels like the best course of action. ie. upgrade the router OS. Regards On 22/08/16 13:31, Steffan Karger wrote: > Hi, > > On 22 August 2016 at 13:27, debbie10t <debbie...@gmail.com> wrote: >> I wonder if anybody can shed some

[Openvpn-users] 2.3.10 work 2.3.11 throws TLS error

2016-08-22 Thread debbie10t
Hi, I wonder if anybody can shed some light on this problem: https://forums.openvpn.net/viewtopic.php?f=6=22290 Thanks -- -- ___ Openvpn-users mailing list

[Openvpn-users] [openvpn-users] --auth-user-pass file containing only username problem

2016-08-21 Thread debbie10t
Hi, Openvpn-2.3.11 on Windows client: 1. --auth-user-pass useronly.txt useronly.txt = username ^Z Using openvpn-gui does *not* work as there is no input window presented. 2. --auth-user-pass userpass.txt userpass.txt = username password ^Z Using openvpn-gui does work. 3. --auth-user-pass

Re: [Openvpn-users] Curious port-forward artifact

2016-08-05 Thread debbie10t
https://forums.openvpn.net/viewtopic.php?f=6=22217#p63587 On 05/08/16 19:39, RB wrote: > I have a properly working server and client (both 2.3.11) passing > traffic mostly as expected, but have encountered some odd behavior I'm > hoping someone can enlighten me about. I've tested the below on

Re: [Openvpn-users] Forum website OFFLINE (resolved)

2016-08-02 Thread debbie10t
This is now resolved - Thankyou On 02/08/16 11:23, debbie10t wrote: > Please be aware: > > forums.openvpn.net is currently * Offline * > > Error: > > General Error > SQL ERROR [ mysqli ] > > N

[Openvpn-users] Forum website OFFLINE

2016-08-02 Thread debbie10t
Please be aware: forums.openvpn.net is currently * Offline * Error: General Error SQL ERROR [ mysqli ] No such file or directory [2002] -- ___ Openvpn-users mailing list

Re: [Openvpn-users] udp connection, client stuck

2016-07-15 Thread debbie10t
Hi On 15/07/16 10:04, Dmitry Melekhov wrote: > Hello! > > This night one of connections was not able to reconnect , last message > in log is: > > Peer Connection Initiated with > > and this is all, openvpn process was running, though. You can bump your client log to --verb 4 (or higher) for more

Re: [Openvpn-users] how to fix tun-ipv6 client address?

2016-07-06 Thread debbie10t
On 06/07/16 12:35, 陆侠孝 wrote: > i install a openvpn on a dual stack server, v4 client dial up to get an ipv6 > address with tunnel. > > > i found v6 address which client got auto change during tunnel establishing. > and also change after re-dial. > > > please help to tell how to give a static

Re: [Openvpn-users] [openvpn-users] client user/pass timeout ?

2016-06-30 Thread debbie10t
On 30/06/16 18:11, Selva Nair wrote: > On Thu, Jun 30, 2016 at 4:25 AM, David Sommerseth < > open...@sf.lists.topphemmelig.net> wrote: > >> On 28/06/16 16:11, debbie10t wrote: >>> Hi, >>> >>> Looking at this forum thread: >>> htt

[Openvpn-users] [openvpn-users] client user/pass timeout ?

2016-06-28 Thread debbie10t
Hi, Looking at this forum thread: https://forums.openvpn.net/viewtopic.php?f=4=22003 I was looking @src for 'timeout' etc for --auth-user-pass but I could not find anything related to timeout .. I setup a quick test client (debian8) and while running the test got this message: Password entry

[Openvpn-users] [openvpn-users] Error GDG: SIOCGIFHWADDR(lo) failed (Andriod)

2016-06-23 Thread debbie10t
Hi What does this indicate please: GDG: SIOCGIFHWADDR(lo) failed https://forums.openvpn.net/viewtopic.php?f=33=21960 Thanks -- Attend Shape: An AT Tech Expo July 15-16. Meet us at AT Park in San Francisco, CA to

[Openvpn-users] systemd-networkd random crashes #3565

2016-06-21 Thread debbie10t
Hi, some of you may be interested in this: https://forums.openvpn.net/viewtopic.php?f=15=21888 https://github.com/systemd/systemd/issues/3565 The gist is: openvpn may be causing systemd-networkd to crash. I am sure somebody here will be able to help. Thanks

[Openvpn-users] UMTS network stick with Redirect-gateway cannot find correct gateway

2016-06-14 Thread debbie10t
Hi, Forum thread: https://forums.openvpn.net/viewtopic.php?f=4=21844 The gist: When --redirect-gateway def1 attempts step *(1)* Create a static route for the *--remote* address which forwards to the pre-existing default gateway OpenVPN fails to determine the current default gateway and so

[Openvpn-users] Ver 1.1.17 doesn't work on Samsung S5 - Andrion

2016-06-09 Thread debbie10t
Hi FYI: https://forums.openvpn.net/viewtopic.php?f=33=21875 Quote: The phone has recently done an upgrade to Andriod Marshmallow, so suspected that might have something to do with it, but then I found out that Open VPN has also been upgraded recently. I dug out a 1.1.16 apk version of

[Openvpn-users] Problem with "TLS Error: reading acknowledgement record from packet"

2016-06-08 Thread debbie10t
Hi, Forum thread: https://forums.openvpn.net/viewtopic.php?f=36=21849 Gist: Client: IPad - OpenVPN 1.0.7 build 199 on iOS 9.3.2 Server: pfSense / Openvpn 2.3.11 Protocol: TCP The error is: TLS Error: reading acknowledgement record from packet (On the server) Any info would be helpful

Re: [Openvpn-users] apple_digest_error: NONE: not usable

2016-06-07 Thread debbie10t
On 07/06/16 15:05, Samuli Seppänen wrote: > >> Hi, >> >> as I have no access to apple products could somebody who does please >> advice on this: >> https://forums.openvpn.net/viewtopic.php?f=36=21840 >> (This has come up quite a few times on the forum recently) >> >> CORE_ERROR

Re: [Openvpn-users] Control Channel: TLSxxxx cipher xxxx, cipher environment variable for quick verify

2016-06-07 Thread debbie10t
On 07/06/16 15:37, Samuli Seppänen wrote: > >> Hi, >> >> I have been trying to find a way to verify the Control Channel: TLS, >> cipher. >> >> The reason is because I was a bit dismayed to find this in my server >> log: >> " Deprecated TLS cipher name 'DHE-RSA-AES256-GCM-SHA384', >>

[Openvpn-users] Control Channel: TLSxxxx cipher xxxx, cipher environment variable for quick verify

2016-06-07 Thread debbie10t
Hi, I have been trying to find a way to verify the Control Channel: TLS, cipher. The reason is because I was a bit dismayed to find this in my server log: " Deprecated TLS cipher name 'DHE-RSA-AES256-GCM-SHA384', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384' " Obviously,

Re: [Openvpn-users] IPv6 Manual and Wiki page errors

2016-06-01 Thread debbie10t
On 01/06/16 16:56, David Sommerseth wrote: > On 01/06/16 16:22, debbie10t wrote: >> At this time, I am not suitably versed with git to submit a patch, >> I am working on it if you choose to wait .. but it is something I >> will continue to learn even if somebody else subm

Re: [Openvpn-users] IPv6 Manual and Wiki page errors

2016-06-01 Thread debbie10t
On 01/06/16 16:56, David Sommerseth wrote: > On 01/06/16 16:22, debbie10t wrote: >> At this time, I am not suitably versed with git to submit a patch, >> I am working on it if you choose to wait .. but it is something I >> will continue to learn even if somebody else subm

Re: [Openvpn-users] IPv6 Manual and Wiki page errors

2016-06-01 Thread debbie10t
Hi, On 23/05/16 09:31, Samuli Seppänen wrote: > >> Hi, >> >> I noticed these two small details: >> >> Manual: >> >> *--server-ipv6 ipv6addr/bits* >> convenience-function to enable a number of IPv6 related options at >> once, namely *--ifconfig-ipv6, --ifconfig-ipv6-pool, --tun-ipv6* >>

Re: [Openvpn-users] reconnecting and block-outside-dns conflict ?

2016-05-31 Thread debbie10t
Hi, On 27/05/16 16:50, Selva Nair wrote: > On Fri, May 27, 2016 at 7:56 AM, debbie10t <debbie...@gmail.com> wrote: > >> Hi, >> >> This is the original question: >> https://forums.openvpn.net/viewtopic.php?f=4=21797 >> >> The gist is: >&

[Openvpn-users] reconnecting and block-outside-dns conflict ?

2016-05-27 Thread debbie10t
Hi, This is the original question: https://forums.openvpn.net/viewtopic.php?f=4=21797 The gist is: If a connection is dropped and --block-outside-dns is blocking access to local DNS then how can the client reconnect if it cannot resolve a host name ? My assuption is that the connection will

Re: [Openvpn-users] [Openvpn-devel] Samsung Galaxy S6 to android 6.0.1 powersave

2016-03-07 Thread debbie10t
- Original Message - From: "Arne Schwabe" To: "Selva Nair" ; "Debbie Tent" Cc: ; Sent: Monday, March 07, 2016 3:40 PM Subject: Re: [Openvpn-devel]

Re: [Openvpn-users] --mtu-disc vs --mtu-test

2016-02-23 Thread debbie10t
Hi - Original Message - From: "Selva Nair" To: "Debbie Tent" Cc: "Gert Doering" ; Sent: Tuesday, February 23, 2016 7:48 PM Subject: Re: [Openvpn-users] --mtu-disc vs --mtu-test > Hi,

Re: [Openvpn-users] --mtu-disc vs --mtu-test

2016-02-23 Thread debbie10t
.de> > To: <debbie...@gmail.com> > Cc: <openvpn-users@lists.sourceforge.net> > Sent: Tuesday, February 23, 2016 3:18 PM > Subject: Re: [Openvpn-users] --mtu-disc vs --mtu-test > > Hi, > > On Tue, Feb 23, 2016 at 01:53:21PM -, debbie10t gmail.com wrote: &g

Re: [Openvpn-users] --mtu-disc vs --mtu-test

2016-02-23 Thread debbie10t
gt; Cc: <openvpn-users@lists.sourceforge.net> Sent: Tuesday, February 23, 2016 3:18 PM Subject: Re: [Openvpn-users] --mtu-disc vs --mtu-test Hi, On Tue, Feb 23, 2016 at 01:53:21PM -, debbie10t gmail.com wrote: > All three return: > --mtu-disc is not supported on this OS Which usually mean

[Openvpn-users] --mtu-disc vs --mtu-test

2016-02-23 Thread debbie10t
Hi I have tested --mtu-disc yes/no/maybe & --mtu-test on Arch, Debian and Ubuntu Linux All three return: --mtu-disc is not supported on this OS while --mtu-test works fine. Are there any specific dependencies required for --mtu-disc Are there any specific Linux versions required for --mtu-disc

[Openvpn-users] Download verification methods

2016-02-22 Thread debbie10t
HI, I am trying to verify openvpn downloads with signatures but there appears to be something wrong ? arby@mint64-dik-xpc ~/Downloads $ gpg --list-keys /home/arby/.gnupg/pubring.gpg - pub 1024D/198D22A3 2009-11-21 uid Samuli Seppänen

[Openvpn-users] Admin help: Android vpndialogs.apk

2016-02-08 Thread debbie10t
Hi, I have tentatively approved this post on the forum: https://forums.openvpn.net/topic13772.html#p58481 But I do not know enough about android to tell if it is valid or not. Can somebody here please let me know if this is suitable for the forum .. I do not want to mislead people. Thanks

[Openvpn-users] Openvpn.net Wserver error !

2016-01-22 Thread debbie10t
FYI: There appears to be something badly wrong with https://community.openvpn.net/openvpn/wiki/TitleIndex This is what I get: Talk (1800.860.9230) Quickbooks Technical SupTalk? (1800.860.9230) Quickbooks Technical Support Phone Num.ber/ Talk ((1800.860.9230)) QTalk

[Openvpn-users] Problem with systemd unit and unpriv-ip example.

2016-01-16 Thread debbie10t
Hi This is the thread which shows the current question: https://forums.openvpn.net/topic20458.html This is the example we have followed: https://openvpn.net/index.php/open-source/documentation/howto.html#security Scroll down to: Unprivileged mode (Linux only) There is also a debian bug report

Re: [Openvpn-users] Fw: Windows installers with OpenVPN-GUI that requests highest available privileges

2016-01-13 Thread debbie10t
It would appear that an issue has arisen: https://forums.openvpn.net/topic20734.html any further info appreciated. - Original Message - From: "Samuli Seppänen" To: ; Sent: Monday, January 04, 2016 6:10 PM

Re: [Openvpn-users] Forum: Openvpn run ftp traffic may cause kernel panic?

2016-01-11 Thread debbie10t
Thank you Gert .. I agree on every point :-) I was not sure about OpenSSL as maybe it was held back by specific distro .. or something No further interest required. Regards - Original Message - From: "Gert Doering" To: Cc:

Re: [Openvpn-users] Bridging Blocking Local Network Access

2016-01-04 Thread debbie10t
OK - Original Message - From: "Morris, Russell" To: Sent: Monday, January 04, 2016 8:56 PM Subject: [Openvpn-users] Bridging Blocking Local Network Access > I lose my local network (HomeGroup fails, I presume you mean

Re: [Openvpn-users] Bridging Blocking Local Network Access

2016-01-04 Thread debbie10t
Hi .. This is bothering me .. did you post this to the Forum as well ? thanks - Original Message - From: "Morris, Russell" To: Sent: Monday, January 04, 2016 8:56 PM Subject: [Openvpn-users] Bridging Blocking Local Network

[Openvpn-users] Fw: Windows installers with OpenVPN-GUI that requests highest available privileges

2016-01-04 Thread debbie10t
Copying to list .. - Original Message - From: To: "Samuli Seppänen" Sent: Monday, January 04, 2016 4:21 PM Subject: Re: [Openvpn-users] Windows installers with OpenVPN-GUI that requests highest available privileges > OK I misunderstood .. > >

Re: [Openvpn-users] Windows installers with OpenVPN-GUI that requests highest available privileges

2016-01-01 Thread debbie10t
On WXP-SP3-32b: (VirtualBox VM) openvpn-install-2.3.9-I901-i686.exe Logged in as *normal* user - "requires admin privileges" Install & Uninstall Logged in as admin: - Privileges appear to work as desired: Install & Uninstall - TAP does *not* install during install - TAP does *not* install via TAP

[Openvpn-users] cannot start in unprivileged mode via systemctl

2015-12-30 Thread debbie10t
This post appeared on the Forum .. It looks well reseaerched https://forums.openvpn.net/topic20458.html I just thought I would ask here first to see if anybody can add any further info before proceeding. Thanks --

Re: [Openvpn-users] How to successfully post to the Forum?

2015-12-30 Thread debbie10t
Hi, For my part: I apologies to all who have been effected by recent moderation problems at forums.openvpn.net Reply: generally "real" spam is not the problem, Spam bots very rarely (if ever) get to post. Real people posting spam still do and they are **crafty** which is why we moderate all

[Openvpn-users] OpenVPN Ubuntu packages unsigned?

2015-12-30 Thread debbie10t
This post is also (probably) worth mention here: https://forums.openvpn.net/topic20493.html Concerns the openvpn.net repo Quote: I'm having the same error with Debian jessie. This started occurring after upgrading to: apt (1.1~exp9) experimental; urgency=medium A new algorithm for pinning has

Re: [Openvpn-users] How to successfully post to the Forum?

2015-12-29 Thread debbie10t
Moderation .. And a little participation ! (on this occasion only) [] For and on behalf of : Traffic [] *Currently* your Only friendly online "OpenVPN Forum guru" ... Regards debbie10t (Forum Mod **Currently* Active*) - Original Message - From: "Eric Crist" <ecr.

Re: [Openvpn-users] How to successfully post to the Forum?

2015-12-29 Thread debbie10t
- Original Message - From: "Jeff Boyce" To: Sent: Tuesday, December 29, 2015 6:36 PM Subject: Re: [Openvpn-users] How to successfully post to the Forum? Well, I see that my issue was finally posted to the forum. Although I

Re: [Openvpn-users] Debian Jessie repository ?

2015-12-18 Thread debbie10t
Hi - Original Message - From: "Sebastian Rubenstein" To: ""Samuli Seppänen"" Cc: Sent: Friday, December 18, 2015 9:49 AM Subject: Re: [Openvpn-users] Debian Jessie repository ? > >Sent: Thursday, December

Re: [Openvpn-users] OpenVPN 2.3.9 released

2015-12-18 Thread debbie10t
Hi - Original Message - From: "Gert Doering" To: Cc: "Gert Doering" ; "Sebastian Rubenstein" ; Sent: Friday, December 18, 2015 9:14 PM Subject: Re: [Openvpn-users]

Re: [Openvpn-users] OpenVPN 2.3.9 released

2015-12-18 Thread debbie10t
- Original Message - From: "Gert Doering" To: "Sebastian Rubenstein" Cc: Sent: Friday, December 18, 2015 1:02 PM Subject: Re: [Openvpn-users] OpenVPN 2.3.9 released >> Am I right to state that >> >> setenv

Re: [Openvpn-users] How exactly does setting the option "block-outside-dns" help for Linux and BSD users?

2015-12-18 Thread debbie10t
Hi - Original Message - From: "Sebastian Rubenstein" To: Sent: Friday, December 18, 2015 4:58 PM Subject: [Openvpn-users] How exactly does setting the option "block-outside-dns" help for Linux and BSD users? > Suppose I use

Re: [Openvpn-users] How to successfully post to the Forum?

2015-12-17 Thread debbie10t
Hi - Original Message - From: "Samuli Seppänen" To: "Selva Nair" ; "Jeff Boyce" Cc: Sent: Thursday, December 17, 2015 8:09 PM Subject: Re: [Openvpn-users] How to successfully post to

Re: [Openvpn-users] OpenVPN 2.3.9 released

2015-12-16 Thread debbie10t
I just want to check this is not an error of some sort: https://forums.openvpn.net/topic20433.html#p56941 Note: Unpacking openvpn (2.3.9-debian0) over (2.3.2-7ubuntu3.1) ... Debian over Ubuntu ? I double checked my sources.list.d twice: deb http://swupdate.openvpn.net/apt trusty main

Re: [Openvpn-users] "Safe" configurations for installation without admin privileges?

2015-12-09 Thread debbie10t
It's like dat .. - Original Message - From: "Jonathan K. Bullard" To: "Debbie Tent" Cc: "Selva Nair" ; Sent: Thursday, December 10, 2015 2:12 AM Subject: Re: [Openvpn-users] "Safe"

Re: [Openvpn-users] "Safe" configurations for installation without admin privileges?

2015-12-09 Thread debbie10t
erm .. - Original Message - From: "Selva Nair" To: "Jonathan K. Bullard" Cc: Sent: Wednesday, December 09, 2015 11:35 PM Subject: Re: [Openvpn-users] "Safe" configurations for installation without admin

Re: [Openvpn-users] Routing between two LAN

2015-12-06 Thread debbie10t
You _can_ push the Server LAN Route 192.168.254.0/24 from the Server to the Client. Next .. One step at a time: You must enable IP_Forwarding on both the VPN CLient and VPN Server You can then use tcpdump to follow packets across the network .. See if you can figure out the next step ;-) -

Re: [Openvpn-users] Can't ping another box behind OpenVPN server

2015-11-25 Thread debbie10t
If you would like to take this to the Forum .. I might be able to help. Following this on a mailing list is not easy. This Forum: https://forums.openvpn.net/server-administration-f4.html See the Rules at the top of the page Regards. - Original Message - From: "Jeff Boyce"

Re: [Openvpn-users] Can't ping another box behind OpenVPN server

2015-11-19 Thread debbie10t
This mailing list is not the right place to ask this question This is for OpenVPN support not pfsense. However, as I have a pfsense VM, I looked at this for you and conclude the following: 1. You have identified the details of the route you need to add, 2. You have identified the network

  1   2   >