Re: [Openvpn-users] Re: TCP works UDP fails

[/dev/rob0 <rob0@xxxxxxxxx>]

On Wednesday 06 July 2005 00:47, col_mil@xxxxxxxxxx wrote:
> > What is the manufacturer and model of access point? I had
> > openvpn UDP problems with my D-Link DI-614+. The openvpn
>
> Access Point = (D-Link DWL-7100AP) & just serves radio a/b/g

What mine did, I found by checking /proc/net/ip_conntrack on an 
intermediate Linux router before the other openvpn peer: it was 
changing the origin port. I do think it was a NAT bug on the D-Link 
equipment.

D-Link support never escalated the matter beyond their first-level 
support (if in fact there *is* a higher level?) so it wasn't worth my 
time to pursue it. Just Say No to D-Link Routers, when making a 
purchasing decision or recommendation.

> Since TCP works, I figure (possibly erroneously..) that the
> firewall on the server is not blocking anything that would
> stop UDP from working either - as it seems to route TCP

Perhaps it's a NAT error there. In my case the remote Linux firewall 
wasn't passing these packets to the peer, because the connection was 
not seen as --state RELATED,ESTABLISHED (in Linux netfilter terms.)

> without problems, and ALL related traffic should pass
> through regardless of proto..

You'll have to do a bit of detective work to find out what is happening 
to your UDP packets.
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users