-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 28/06/10 11:30, Samuli Seppänen wrote:

> 
> Discussed an old patch, "Exclude ping and control packets from activity":
> 
> <http://article.gmane.org/gmane.network.openvpn.devel/3690>
> 
> This issue had been discussed in an earlier meeting:
> 
> <http://article.gmane.org/gmane.network.openvpn.devel/3673>
> 
> In this earlier meeting we decided to ask our users if they had managed
> to configure proper byte limit for --inactivity so that the ping traffic
> would be effectively ignored (without side-effects). Unfortunately
> nobody replied:
> 
> <http://article.gmane.org/gmane.network.openvpn.devel/3676/>
> 
> Waldner will test the patch thoroughly to ensure that it never causes
> ping packets to be dropped. After this the patch can be merged into
> "testing" tree.

Just to clarify a little bit ... The testing will confirm that the patch
do not count internal ping traffic between the OpenVPN server and client
as tunnel traffic, and that other types of traffic (tunnelled traffic)
is accounted for correctly - and that no tunnelled or other internal
control traffic is dropped due to this patch.

The problem in current releases is that the --inactivity feature do not
stop the client if there going a certain amount of ping traffic between
server and client when using the --ping or --keepalive features.  The
assumption is that the provided patch will fix this.


kind regards,

David Sommerseth

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkwoivgACgkQDC186MBRfronbQCfSY7ZWhjEs9bXB0RruqERHk6T
r2UAn3oECN697qMB60NAeO6dhBBGCUTY
=g5UX
-----END PGP SIGNATURE-----

Reply via email to