Re: [Openvpn-users] openvpn refuses connection

[julius Junghans <julius.junghans@xxxxxx>]

rvenne@xxxxxxxxxxxxxxxxx wrote:

> julius Junghans wrote:
>
> > Hi,
> >
> > i don't know why but my openvpn server seems to refuse connections 
> > after it was waiting for connections for some time, restarting the 
> > client side openvpn command sometimes results in this:
> >
> > Fri Mar  3 14:01:25 2006 TCP: connect to serverip:443 failed, will 
> > try again in 5 seconds: Connection refused (errno=111)
> >
> > server:
> > openvpn --proto tcp-server --lport 443 --dev tun --ifconfig 10.0.0.1 
> > 10.0.0.2 --verb 3 --comp-lzo --secret /etc/openvpn/static.key
> > client:
> > openvpn --proto tcp-client --rport 443 --nobind --dev tun --ifconfig 
> > 10.0.0.2 10.0.0.1 --verb 3 --comp-lzo --secret 
> > /etc/openvpn/static.key --remote serverip
> >
> >
> > no config files in use, any ideas?
> >
> > Julius
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by xPML, a groundbreaking scripting 
> > language
> > that extends applications into web and mobile media. Attend the live 
> > webcast
> > and join the prime developer group breaking into this new coding 
> > territory!
> > _______________________________________________
> > Openvpn-users mailing list
> > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> > https://lists.sourceforge.net/lists/listinfo/openvpn-users
>
> did you check out your firewall rules? a fullstate firewall with tls 
> context may cause this, when tcp session is down. your client must 
> initialize a new tcp connection in order to create a new tls context.
>
> try a rule stateless rule like
>
> iptables -A INTPUT -p TCP --dport 443 -j ACCEPT
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting 
> language
> that extends applications into web and mobile media. Attend the live 
> webcast
> and join the prime developer group breaking into this new coding 
> territory!
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
Already tried to shut the firewall down, doesn't help.

Julius


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users