[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] openvpn + shorewall + speed + I will pay


  • Subject: Re: [Openvpn-users] openvpn + shorewall + speed + I will pay
  • From: Erich Titl <erich.titl@xxxxxxxx>
  • Date: Mon, 05 Mar 2007 00:27:18 +0100

Hi

midnightprophet schrieb:
> FC4
> Webmin (shorewall and openvpn modules)
> shorewall
> openvpn 2.1_rc2
> 
> I am willing to pay to have one of you experts help me out with these issues:
> create shorewall scripts/policys/rules that would allow my users to use ports i
> allow (IRC, wow,  msn, etc). I can not seem to figure it out. Another issue i
> might be having is shorewall slowing my tcp connection down more than it should.

You can stop shorewall's rate limiting easy enough. If you don't use any
rate from within shorewall this is not the culprit. Shorewall is nothing
but a script to ease your firewall set up.

> I would pay around $100 us (paypal) to anyone who can help. Email me at
> dassey{@)gmail(.)com. Hopefully the above can be done through webmin as well so
> i can easily duplicate it to other servers.
> 
> Also, i just recently changed servers, everything is the same, except my OpenVPN
> connection dropped from 2.5mb to 600kb. I think i have a 10mb connection. If you
> dont mind, could an expert look at my openvpn config and see if perhaps i could
> add/change/remove a setting to help speed.

Sounds more like a ethernet problem, maybe half/full duplex setting. Do
you experience ethernet drops? You can use "ip -s link sh" to see the
link statistics.

> 
> //server conf (fedora)//
> port 443
> proto tcp-server
> dev tun
> ca keys/testwiz/ca.crt
> cert keys/testwiz/wizserver.crt
> key keys/testwiz/wizserver.key
> dh keys/testwiz/dh1024.pem
> server 10.50.0.0 255.255.255.0
> crl-verify keys/testwiz/crl.pem
> cipher DES-CBC

Not _that_ good as a cipher :-(

cheers

Erich
______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users