|
|
Hi Matthias Matthias Apitz wrote: > El día Monday, March 05, 2007 a las 10:33:25AM +0000, Erich Titl escribió: > >> It smells like a firewall issue and not really a OpenVPN issue. >> >> - Did you check the packets on the client too? >> - Have a look at timeouts, fragmentation issues. >> >> >> Erich >> > > Hi Erich, > > You're right, it is definitely a firewall/fragmentation issue > and not a problem related to OpenVPN. I've checked the messages > in the stand-by firewall again and they registered the blocking > of fragments: > > Mar 2 14:23:07 cazador ipmon[167]: 14:23:06.423701 xl1 @0:93 b 10.0.1.202 -> xxx.xxx.xxx.xxx PR udp len 20 (41) (frag 31761:21@1432) OUT > > I have to expand the ipfilter rules with '... keep frags' and > will do a test. > > Interesting remains, why only the stand-by firewall is doing > such a fragmentation... Is the OS/IPF version identical? cheers Erich ______________________ OpenVPN mailing lists https://lists.sourceforge.net/lists/listinfo/openvpn-users |