|
|
>
> PS: sbdy mentioned complexity/security issues: having an udp port for each
> single tunnel creates certainly far more complexity than having just one...
>
Oh, OpenVPNs source code doesn't get more complex while implementing such
"features"? What do you believe, what is the most realistic harm for servers
which have to be accessible to the whole internet? Maybe its own source
code? Can you spell "sendmail" ore "SSH"?
Again: don't add complexity if there is no need.
And sorry, firewall setups doesn't count here. There is no difference
between protecting one port ore thousend ports, when these ports have to
be handled equal. And for OpenVPN, they _have to_.
rolf
Attachment:
pgpuY5eu7YRdZ.pgp
Description: PGP signature
|