|
|
El día Monday, March 05, 2007 a las 10:33:25AM +0000, Erich Titl escribió: > It smells like a firewall issue and not really a OpenVPN issue. > > - Did you check the packets on the client too? > - Have a look at timeouts, fragmentation issues. > > > Erich > Hi Erich, You're right, it is definitely a firewall/fragmentation issue and not a problem related to OpenVPN. I've checked the messages in the stand-by firewall again and they registered the blocking of fragments: Mar 2 14:23:07 cazador ipmon[167]: 14:23:06.423701 xl1 @0:93 b 10.0.1.202 -> xxx.xxx.xxx.xxx PR udp len 20 (41) (frag 31761:21@1432) OUT I have to expand the ipfilter rules with '... keep frags' and will do a test. Interesting remains, why only the stand-by firewall is doing such a fragmentation... Thx again anyway matthias -- Matthias Apitz Manager Technical Support - OCLC PICA GmbH Gruenwalder Weg 28g - 82041 Oberhaching - Germany t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211 e <m.apitz@xxxxxxxxxxxx> - w http://www.oclcpica.org/ http://guru.UnixLand.de/ b http://gurucubano.blogspot.com/ OCLC PICA GmbH, Geschaeftsfuehrer: Christine Magin-Weeger, Norbert Weinberger Sitz der Gesellschaft: Oberhaching, HRB Muenchen: 113261 ______________________ OpenVPN mailing lists https://lists.sourceforge.net/lists/listinfo/openvpn-users |