Care to share what the issue ended up being and how you resolved the issue? You may help someone else who is having the issue too.
Mike K. -----Original Message----- From: wharfratjoe [mailto:wharfrat...@gmail.com] Sent: Tuesday, September 29, 2009 8:31 PM To: efw-user@lists.sourceforge.net Subject: Re: [Efw-user] 2.3 RC1 - some problems i have ran into Firewall rules not working --> finally figured this one out wharfratjoe wrote: > > Here is what I found so far and also posted at the efwsupport.com forum. I > have not checked the bugtracker yet. If these are related to any I will > add the links to this post. > > This is also a fresh install of 2.3RC1. > > ############################ > > 2.3RC1 - Firewall rules not working > > ( http://efwsupport.com/index.php?topic=927 ) > > > I created port forwarding rules in 2.3RC1 and when i try to browse to a > webserver behind endian (using http port 80) it redirects to the endian > web admin page http://x.x.x.x:10443. Obviously either I am doing something > wrong in the configuration or its broke. If someone is experiencing the > same issue please post or what I maybe doing wrong. Some documentation > would be helpful to. see also post for docs needed - > http://efwsupport.com/index.php?topic=923 > > (if i could vpn into the box, which that is not working either I would be > able to give more details at the moment) > > I will post more details later tonight. > > > > ############################ > > 2.3 RC1 - vpn is not working > > http://efwsupport.com/index.php?topic=926.msg2040#msg2040 > > I have used the following client side config since 2.1, however it is not > working in 2.3RC1. I have used self signed certificate since 2.1. > > Client Config > > client > float > dev tap > proto udp > port 1194 > remote x.x.x.x > resolv-retry infinite > nobind > persist-key > persist-tun > ca vpnserver-hostcert.pem > auth-user-p > pull > comp-lzo > > > I am receiving the following errors: > > Mon Sep 28 11:17:14 2009 OpenVPN 2.1_rc15 i686-pc-mingw32 [SSL] [LZO2] > [PKCS11] built on Nov 19 2008 > Mon Sep 28 11:17:23 2009 WARNING: No server certificate verification > method has been enabled. See http://openvpn.net/howto.html#mitm for more > info. > Mon Sep 28 11:17:23 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' > or higher to call user-defined scripts or executables > Mon Sep 28 11:17:23 2009 LZO compression initialized > Mon Sep 28 11:17:23 2009 UDPv4 link local: [undef] > Mon Sep 28 11:17:23 2009 UDPv4 link remote: x.x.x.x:1194 > Mon Sep 28 11:17:23 2009 WARNING: this configuration may cache pwords in > memory -- use the auth-nocache option to prevent this > Mon Sep 28 11:17:24 2009 VERIFY ERROR: depth=1, error=self signed > certificate in certificate chain: /C=IT/O=efw/CN=efw_CA > Mon Sep 28 11:17:24 2009 TLS_ERROR: BIO read tls_read_plaintext error: > error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify > failed > Mon Sep 28 11:17:24 2009 TLS Error: TLS object -> incoming plaintext read > error > Mon Sep 28 11:17:24 2009 TLS Error: TLS handshake failed > Mon Sep 28 11:17:24 2009 SIGUSR1[soft,tls-error] received, process > restarting > Mon Sep 28 11:17:26 2009 WARNING: No server certificate verification > method has been enabled. See http://openvpn.net/howto.html#mitm for > > Updated: open ticket for this: http://bugs.endian.com/view.php?id=2223 > > ############################ > > 2.3RC1 help docs needed > > http://efwsupport.com/index.php?topic=923.msg2034#msg2034 > > Looking for 2.3RC1 docs. The help links are invalid after the install > > Update: Opened ticket for this: http://bugs.endian.com/view.php?id=2222 > > ############################ > > Re: 2.3 web admin - installed 2.3 and restored a backup from 2.2 > > Seems to be a fix posted here for this (i have not tried the fix yet) > > http://efwsupport.com/index.php?topic=897 > > ############################ > -- View this message in context: http://www.nabble.com/2.3-RC1---some-problems-i-have-ran-into-tp25652055 p25673177.html Sent from the efw-user mailing list archive at Nabble.com. ------------------------------------------------------------------------ ------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user
