[Openvpn-users] Re: Very strange replay problem

[Ged Haywood <ged@xxxxxxxxxxxxxxxxxx>]

Hi guys,

On Wed, 2 Jun 2004 Jon Nelson wrote:

> On Wed, 2 Jun 2004, James Yonan wrote:
>
> > Jon Nelson <jnelson-openvpn@xxxxxxxxxxx> said:
> >
> > > I did some hardware futzing on the SuSE machine and rebooted it.
> > > When it came up, none of the network stuff worked.
> > > A few reboots later, I determined the cause to be OpenVPN - it was
> > > seemingly working fine on the SuSE machine, but on the Debian machine
> > > the OpenVPN daemon was complaining thusly:
> > >
> > > Wed May 26 23:36:41 2004 151[0]: Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #92688 /
[snip]
> > Aside from actual replay attacks, there are a few things that can cause replay
> > false alarms:
> >
> > * Packet duplication occurring in the network link because of badly configured
> > routers.
>
> The link is a wireless link using a Prism card.  With heavy volume, I
> get a non-negligible number of duplicate warnings.

Aha!  That's interesting.  I occasionally see a problem with the VPN
dying when the (client's) dynamic IP in France is renegotiated.  Might
this problem have something to do with the fact that VPN server (which
is in England) is sitting behind a wireless link?

And yes, there are Prism cards in two of the internal routers, and
yes, I see duplicated packets now and then, and yes, I see the odd
replay warning.  Still running 1.5-beta9.

73,
Ged.

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users