[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] connection timeout


  • Subject: Re: [Openvpn-users] connection timeout
  • From: Alberto Gonzalez Iniesta <agi@xxxxxx>
  • Date: Fri, 12 Apr 2002 20:02:05 +0200

On Fri, Apr 12, 2002 at 07:29:07PM +0200, Simone Manca wrote:
> 
> Hi all,
> 
> this is my first message to list,
> I have as soon installed openvpn and I'm making some test.
> 
> I have 2 linuxbox, pc1 (tls-client, firewalled) and pc2 (tls-server) whith
> kernel 2.2. pc1 and pc2 are always connected to Internet.
> 
> All it works perfectly, but when not use the system for a lot of time
> the network not respont from pc2 (not even ping).
> in order to restore the connection I must to make a ping from pc1.
> 
> Why? there are some timeout? it centers something with "--reneg-sec"
> argoument???

The firewall in front of pc1 is a Stateful firewall, isn't it? Probably
iptables. The problem is that your firewall will let packets trough only
if it knows those packets belong to a connection. 
If you start sending packets from pc1 then packets from pc2 are supposed 
to be from the same 'connection' (ok, UDP has no connections, but just 
to ilustrate my example :-)

So when time passes, and there's no traffic, if pc2 tries to send
anything to pc1, the firewall won't associate those packets with
anything 'going on' and it won't let them pass.

I hope I made myself clear, I'm in a hurry now! :-) 
Excuse any grammar/spell/networking concepts in this mail O:-)

Regards

-- 
Alberto Gonzalez Iniesta       | They that give up essential liberty
agi@xxxxxx                     | to obtain a little temporary safety
Encrypted mail preferred       | deserve neither liberty nor safety.

Key fingerprint = 9782 04E7 2B75 405C F5E9  0C81 C514 AF8E 4BA4 01C3

_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users