Re: [Openvpn-users] any way to get local network details toflow through to the server?

2015-06-02 Thread debbie10t
- Original Message - From: "David Sommerseth" To: "Jason Haar" ; Sent: Tuesday, June 02, 2015 11:58 PM Subject: Re: [Openvpn-users] any way to get local network details toflow through to the server? > On 2 June 2015 22:05:21 CEST, Jason Haar wrote: >>Hi there >> >>We're using openv

Re: [Openvpn-users] any way to get local network details to flow through to the server?

2015-06-02 Thread Jason Haar
On 03/06/15 10:58, David Sommerseth wrote: > Hi, Have you looked at the --client-nat option in the man page? Yeah - but it's an issue of only wanting it under the condition when the local network conflicts with the corporate network. One-to-one NAT is great but it still breaks some applications,

Re: [Openvpn-users] any way to get local network details to flow through to the server?

2015-06-02 Thread David Sommerseth
On 2 June 2015 22:05:21 CEST, Jason Haar wrote: >Hi there > >We're using openvpn to connect employees to the corporate 10/8 network >and hit a problem with a client who was on a hotel 10/8 network. We use >openvpn in split-tunnel mode and unfortunately the hotel used the same >10.X subnet as a lar

Re: [Openvpn-users] any way to get local network details to flow through to the server?

2015-06-02 Thread Gert Doering
Hi, On Wed, Jun 03, 2015 at 08:05:21AM +1200, Jason Haar wrote: > In this case using the openvpn tunnel as the default gw should have > solved the problem - but normal people can't figure that out - so I'd > like to solve it dynamically at the server end. However, to do that, the > server would ne

Re: [Openvpn-users] any way to get local network details to flow through to the server?

2015-06-02 Thread Mathias Jeschke
Hi all, On 2015-06-02 at 22:40 Mathias Jeschke wrote: > AFAIK, this is not possible, but you have options from my pov: > > (1) Deploy 2 OpenVPN configurations to your users - one for split > tunnel and one without (redirect-gw). Forget this option - the redirect-gateway does not work at al

Re: [Openvpn-users] any way to get local network details to flow through to the server?

2015-06-02 Thread Mathias Jeschke
Hi Jason, On 2015-06-02 at 22:05 Jason Haar wrote: > In this case using the openvpn tunnel as the default gw should have > solved the problem - but normal people can't figure that out - so I'd > like to solve it dynamically at the server end. However, to do that, the > server would need to know i

[Openvpn-users] any way to get local network details to flow through to the server?

2015-06-02 Thread Jason Haar
Hi there We're using openvpn to connect employees to the corporate 10/8 network and hit a problem with a client who was on a hotel 10/8 network. We use openvpn in split-tunnel mode and unfortunately the hotel used the same 10.X subnet as a large server subnet range we use - so the user couldn't re

Re: [Openvpn-users] Site-to-Site configuration?

2015-06-02 Thread Zesen Qian
Hello Gert, Hey I 've got it working! Yes, setting rp_filter=0 solves the problem. Many thanks for your help! Gert Doering writes: > Hi, > > On Tue, Jun 02, 2015 at 06:38:59PM +0800, Zesen Qian wrote: >> Is using tap instead of tun my only choice? As I 've already seen >> packets flowing out of

Re: [Openvpn-users] Site-to-Site configuration?

2015-06-02 Thread Gert Doering
Hi, On Tue, Jun 02, 2015 at 06:38:59PM +0800, Zesen Qian wrote: > Is using tap instead of tun my only choice? As I 've already seen > packets flowing out of the tun interface in the server end, the only > problem is that the packets is not forward to another interface. Might be rp_filter getting

Re: [Openvpn-users] Site-to-Site configuration?

2015-06-02 Thread Zesen Qian
Hello Bonno, Is using tap instead of tun my only choice? As I 've already seen packets flowing out of the tun interface in the server end, the only problem is that the packets is not forward to another interface. I 'm told that tap is of more overhead, so I prefer tun if possible. Bonno Bloksma w

Re: [Openvpn-users] Site-to-Site configuration?

2015-06-02 Thread Jan Just Keijser
Hi, Zesen Qian wrote: > Hello Bonno, > Thanks for your help! Now I 've setup a working site-to-site config and > I can ping from one site to another site. There still a small problem, > though. > Since it's a site-to-site config, I don't really need any IP address on > either end of the tunnel. Th

Re: [Openvpn-users] OpenVPN continues to fail name resolution after connection is established

2015-06-02 Thread Gert Doering
Hi, On Tue, Jun 02, 2015 at 09:27:41AM +0100, Sebastian Arcus wrote: > > (See https://community.openvpn.net/openvpn/ticket/523 for a detailed > > description what happens - though usually the scenario is slightly > > different, with /etc/resolv.conf being modified and not automatically > > re-read

Re: [Openvpn-users] OpenVPN continues to fail name resolution after connection is established

2015-06-02 Thread Sebastian Arcus
On 01/06/15 18:06, Gert Doering wrote: > Hi, > > On Mon, Jun 01, 2015 at 04:56:59PM +0100, Sebastian Arcus wrote: >> Could anyone throw some light on this please. I've noticed this problem >> for a long time. If openvpn on the client starts before Internet >> connectivity, and the 'remote' directiv