Re: [leaf-user] openvpn server in v6

2017-02-16 Thread Trev Peterson
Shouldn't the paths be relative to /etc/openvpn?  Did you try copying the keys there and adjusting the relative paths?  Might not be a bug at all. On Thu, 2017-02-16 at 09:01 +1100, Mark Berndt wrote: > Hello all, > > I just upgraded to v6.02 and had some time to play with the openvpn > server, 

Re: [leaf-user] OpenVPN autostart

2014-05-13 Thread kp kirchdoerfer
Am Sonntag, 11. Mai 2014, 21:10:20 schrieb Otto Halák - TeleLarm: > Dear users, > Running 5.0.2 and 5.0.3 (i486) on two WRAP boards and noticed on both, > that OpenVPN does not want to automatically start after boot. > I could try > AUTOSTART="all" > or > AUTOSTART="client" > with no success. > >

Re: [leaf-user] OpenVPN running in DMZ using Bering uClibc 3.1

2011-03-29 Thread Doug Sampson
> -Original Message- > From: Doug Sampson [mailto:do...@dawnsign.com] > Sent: Tuesday, March 29, 2011 06:02 PM > To: leaf-user@lists.sourceforge.net > Subject: [leaf-user] OpenVPN running in DMZ using Bering uClibc > 3.1 > > Hello, > > I'm experimenting with a dd-wrt type wireless access

Re: [leaf-user] Openvpn multiple instances

2010-10-01 Thread Trev Peterson
Hey Robert, Not sure what your configuration is but what I've done for a client is just copy /etc/openvpn to /etc/openvpn2 and /etc/init.d/openvpn to /etc/init.d/openvpn2. You need to make a few changes in the various files for the new locations but then you have 2 independently controlled openvp

Re: [leaf-user] Openvpn multiple instances

2010-10-01 Thread Graziano Brioschi
give a look in /etc/default/openvpn for "AUTOSTART" variabile graziano Il 01/10/2010 12.30, bob ha scritto: > Hello leaf list, > I have LEAF running on a WRAP box using shorewall& openvpn. > We need to be able to serve udp& tcp openvpn for proxying reasons. > The 'standard' openvpn can be con

Re: [leaf-user] Openvpn multiple instances

2010-10-01 Thread Juergen Northe
Hi Robert, take a look into /etc/init.d/openvpn : CONFIG_DIR=/etc/openvpn .. AUTOSTART="all" .. .. if test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then # all VPNs shall be started automatically for CONFIG in `cd $CONFIG_DIR; ls *.conf 2> /dev/null`; do NAME=${CONFIG%%.co

Re: [leaf-user] Openvpn Installation

2008-07-08 Thread Erich Titl
Jim Jim Ford wrote: Erich Titl wrote: Jim Jim Ford schrieb: I use a Ubuntu Linux machine where I work (at a school). At home I use an XP machine (because of Photoshop!) behind a Bering Leaf uClibc box. I'd like to access my home machine from work and from what I can deduce, Openvpn seems

Re: [leaf-user] Openvpn Installation

2008-07-07 Thread Erich Titl
Jim Jim Ford schrieb: I use a Ubuntu Linux machine where I work (at a school). At home I use an XP machine (because of Photoshop!) behind a Bering Leaf uClibc box. I'd like to access my home machine from work and from what I can deduce, Openvpn seems the way to go. I'm initially working on

Re: [leaf-user] OpenVPN config for joining two LEAF-based networks?

2007-09-26 Thread leaf
e DNS server for the whole VPN'd network, but I want to stay away from changes that break either LAN when the VPN connection is down. For now I can just comment out a line in /etc/hosts on both LEAF boxen each time I change locations. :-) Thanks! --Eric > Date: Tue, 25 Sep 2007 23:51

Re: [leaf-user] OpenVPN config for joining two LEAF-based networks?

2007-09-25 Thread David M Brooke
Hi Eric, I did something similar on Bering-uClibc 3.0.1 a while back, albeit using OpenSwan (ipsec.lrp) rather than OpenVPN. One of my WAN addresses was effectively static though - I don't know how you'll get on if *both* addresses are dynamic. Maybe if you use a dynamic DNS service you can define

Re: [leaf-user] openvpn

2007-01-21 Thread Paul Wright
> > Why would I install openvpn on Bering box? Is this nessesary > in order to get to work above setup? > No, the setup you described would work if the necessary ports were forwarded through the firewall to your server. Further, if you use the bridging mode of openvpn, you could have access to an

Re: [leaf-user] OpenVPN Client and LEAF 3.0 Beta 2

2006-12-03 Thread Eric Spakman
Bob, Erich, > Bob > > > Bob von Knobloch wrote: > >> Dear LEAF list, >> >> >> having upgraded from 2.3 to 3.0 Beta 2, I notice small quirk(?). I am >> using the OpenVPN package from the ISO image and want to remove the >> client config file, as I did on the 2.3 version. When I do this (delete >> f

Re: [leaf-user] OpenVPN Client and LEAF 3.0 Beta 2

2006-11-30 Thread Eric Spakman
Hi Erich, Bob, >Bob > >Bob von Knobloch wrote: >> Dear LEAF list, >> >> having upgraded from 2.3 to 3.0 Beta 2, I notice small quirk(?). >> I am using the OpenVPN package from the ISO image and want to remove the >> client config file, as I did on the 2.3 version. >> When I do this (delete from

Re: [leaf-user] OpenVPN Client and LEAF 3.0 Beta 2

2006-11-30 Thread Erich Titl
Bob Bob von Knobloch wrote: > Dear LEAF list, > > having upgraded from 2.3 to 3.0 Beta 2, I notice small quirk(?). > I am using the OpenVPN package from the ISO image and want to remove the > client config file, as I did on the 2.3 version. > When I do this (delete from /etc/openvpn/ and save co

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-16 Thread Eric Spakman
Hello Bodo, > >> If you make a list of (simple) tools/scripts which would be valuable >> in such a package I will make a package out of it. > > Hello Eric, > > > I don't use OpenVPN and I don't create certificates. > (I use IPsec and the admin generates certs for me.) > That's why I don't know whic

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-16 Thread Bodo Meissner
Am 15.08.2006 21:39:39 schrieb(en) Eric Spakman: > If you make a list of (simple) tools/scripts which would be valuable > in such a package I will make a package out of it. Hello Eric, I don't use OpenVPN and I don't create certificates. (I use IPsec and the admin generates certs for me.) That's

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-16 Thread Eric Spakman
Hi Kp, >> >> >> I suggest to create a separate "openvpn CA" package that contains the >> revocation script and maybe other tools for key/certificate management. > > The natural place for a revoke script would be easyrsa.lrp. > This package contains the key generation scripts and already requires >

Re: [leaf-user] OpenVPN compatibility question

2006-08-16 Thread Jack Coates
On 8/12/06, Jack Coates <[EMAIL PROTECTED]> wrote: > > Hi, > > I'm trying to do a simple OpenVPN between a couple of systems, and I'm > having trouble. The tunnel comes up fine according to the OpenVPN logs on > both sides, but they can't ping. Tcpdump -i tun0 on the server while the > client pings

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-16 Thread KP Kirchdoerfer
Hi; Am Dienstag, 15. August 2006 21:30 schrieb Bodo Meissner: > Am 14.08.2006 23:15:19 schrieb(en) Eric Spakman: > > If we add the script to openvpn.lrp the package would also require the > > openssl.lrp package. I will think about a solution. > > Hello Eric, > > I suggest to create a separate "op

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-15 Thread Eric Spakman
Hello Bodo, > > I suggest to create a separate "openvpn CA" package that contains the > revocation script and maybe other tools for key/certificate management. > If you make a list of (simple) tools/scripts which would be valuable in such a package I will make a package out of it. > I think the re

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-15 Thread Bodo Meissner
Am 14.08.2006 23:15:19 schrieb(en) Eric Spakman: > If we add the script to openvpn.lrp the package would also require the > openssl.lrp package. I will think about a solution. > Hello Eric, I suggest to create a separate "openvpn CA" package that contains the revocation script and maybe other

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-14 Thread Eric Spakman
Hi Bob, Sorry for responding so late. If we add the script to openvpn.lrp the package would also require the openssl.lrp package. I will think about a solution. Regards, Eric > Hi Eric, > > > Just to confirm, the script works fine without modification, the Server > config needs "crl-verify keys/

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-12 Thread Bob von Knobloch
Hi Eric, Just to confirm, the script works fine without modification, the Server config needs "crl-verify keys/crl.pem" adding to be able to use the CRL generated by "full-revoke ". On testing, the leaf box shows that a revoked certificate has been tried in daemon.log. Sadly the Windows Openvpn

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-09 Thread Eric Spakman
Hi Bob, Correct, but you can just copy the script from the openvpn source to the Bering-uClibc system and make it executable. Regards, Eric > Hi Eric, > > > Thanks for answering, but the revoke script is neither in the openvpnz > nor the openssl lrp package. I have both installed on my LEAF box.

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-09 Thread Bob von Knobloch
Hi Eric, Thanks for answering, but the revoke script is neither in the openvpnz nor the openssl lrp package. I have both installed on my LEAF box. Regards, Bob Eric Spakman schrieb: > Hi Bob, > > The revoke-full script is a very simple shell script which only uses > openssl (you need the openss

Re: [leaf-user] OpenVPN & Certificate revocation

2006-08-09 Thread Eric Spakman
Hi Bob, The revoke-full script is a very simple shell script which only uses openssl (you need the openssl.lrp package, probably the reason why the script isn't added by default), so I don't see any reason why it shouldn't work. I think you just can use it "as is" on Bering-uClibc. Regards, Eric

Re: [leaf-user] OpenVPN and bridging in LEAF

2006-03-29 Thread Eric Spakman
Hello Bob, I can only answer a part of your question about bridging. Bridging can be setup by loading the bridge.o module and editing /etc/network/interfaces, something like: auto br0 iface br0 inet static address 192.168.1.254 netmask 255.255.255.0 broadcast 192.168.1.255

RE: [leaf-user] OpenVPN with compression, transfer stalls

2006-02-10 Thread Robert K Coffman Jr - Info From Data
et Subject: RE: [leaf-user] OpenVPN with compression, transfer stalls After FTP stops, can you still use the tunnel with other programs (ping) or is it totally closed? /Lars --- Robert K Coffman Jr - Info From Data <[EMAIL PROTECTED]> skrev: > >Anyone using compression that can c

RE: [leaf-user] OpenVPN with compression, transfer stalls

2006-02-09 Thread Lars
After FTP stops, can you still use the tunnel with other programs (ping) or is it totally closed? /Lars --- Robert K Coffman Jr - Info From Data <[EMAIL PROTECTED]> skrev: > >Anyone using compression that can confirm that it > works? > > I'm using compression between two 2.2.2 boxes and > now t

Re: [leaf-user] OpenVPN with compression, transfer stalls

2006-02-09 Thread Lars
Thanks for answering, Erich! --- Erich Titl <[EMAIL PROTECTED]> skrev: > Lars > > Lars wrote: > > V2.2.3 uClibc kernel 2.4.26 > > openvpnz 2.0.5 Rev 1 > > > > I connect from a Windows system to the Leaf box > with > > OpenVPN. Without compression everything works as > > expected. With compressio

Re: [leaf-user] OpenVPN with compression, transfer stalls

2006-02-09 Thread Erich Titl
Lars wrote: > Hmm, I see that the liblzo package is quite old, > version 1.08-2. A newer version is available on the > lzo homepage (2.02). Anyone with experience from a > more recent version of lzo? My OpenVPN executable is statically linked against lzo-1.08 runs fine... btw. it's 2.0.2 cheers

Re: [leaf-user] OpenVPN with compression, transfer stalls

2006-02-09 Thread Erich Titl
Lars Lars wrote: > V2.2.3 uClibc kernel 2.4.26 > openvpnz 2.0.5 Rev 1 > > I connect from a Windows system to the Leaf box with > OpenVPN. Without compression everything works as > expected. With compression turned on applications that > transferes large amount of data stops responding after > a w

RE: [leaf-user] OpenVPN with compression, transfer stalls

2006-02-09 Thread Robert K Coffman Jr - Info From Data
>Anyone using compression that can confirm that it works? I'm using compression between two 2.2.2 boxes and now that you mention it I have FTP transfers die when using the VPN from time to time... They just quit, no error in the ftp client. I have not investigated it yet. - Bob Coffman -

Re: [leaf-user] Openvpn - Bering uClibc 2.3

2006-01-20 Thread M Lu
I use ntpdate and specify a NTP server in its config. This will correct the time right after your box is up. Make sure you allow your box to connect to that server. If you have an internal NTP server, it would be good. - Original Message - From: "Bob von Knobloch" <[EMAIL PROTECTED]>

Re: [leaf-user] Openvpn - Bering uClibc 2.3

2006-01-20 Thread Erich Titl
Bob Bob von Knobloch wrote: > Dear List, > I have now succeeded in installing an OpenVPNZ on my WRAP LEAF Box. > Everything works very well. This sort of surprised me, I am used to > working with professional IKE/IPSEC VPNs and OpenVPN seems at least as > good. > For information, one small problem

Re: [leaf-user] OpenVPN on Bering

2006-01-18 Thread Martin Hejl
Hi Bob, > Does anyone know what this error message from OpenVPN in (daemon.log) > might actually mean? > > Wed Jan 18 22:30:07 2006 TCP/UDP: Socket bind failed on local address > [undef]:1194: Address already in use > > I have not specified a specific address and certainly have nothing > running

Re: [leaf-user] OpenVPN on Bering

2006-01-18 Thread Erich Titl
Bob von Knobloch wrote: Does anyone know what this error message from OpenVPN in (daemon.log) might actually mean? Wed Jan 18 22:30:07 2006 TCP/UDP: Socket bind failed on local address [undef]:1194: Address already in use I have not specified a specific address and certainly have nothing ru

Re: [leaf-user] OpenVPN and IPSEC Routing Questions

2006-01-04 Thread Charles Steinkuehler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Darcy (Home) wrote: | Good day All, | | I am trying to figure out how to route over ipsec to one site then over | openvpn to another site as well as a few general questions re OpenVPN. | | 1. I have 8 sites to deal with. All sites will connec

Re: [leaf-user] OpenVPN

2005-12-12 Thread Mailing Lists
Tens of installations using bering uclibc Ciao Gianni Hi, I would like to get the feedback of people who have succesfully installed/tested openvpn with bering. --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log fil

Re: [leaf-user] OpenVPN

2005-12-12 Thread Erich Titl
Sylvain Sylvain Pelletier wrote: Hi, I would like to get the feedback of people who have succesfully installed/tested openvpn with bering. I am running it on multiple systems without a hitch using Bering glibc cheers Erich --- This SF.n

Re: [leaf-user] openvpn and passwords

2005-07-04 Thread Backhausen, Sven
Am 01.07.2005 um 17:56 schrieb Stephen More: According to: http://openvpn.net/archive/openvpn-users/2004-10/msg00418.html the openvpn system allows a user/password to be configured. I did not see any mention of passwords on: http://leaf.sourceforge.net/doc/guide/bucu-openvpn.html Is there any

Re: [leaf-user] OpenVpn 2.0

2005-05-12 Thread Erich Titl
Michael Michael D Schleif wrote: Please, somebody comment on changes required to upgrade an existing v1.x openvpn installation to this new version? I have read about the enhancements, &c.; but, I am wondering whether or not an existing configuration will simply work in v2.0 ??? AFAIK, no. 2.0 ha

Re: [leaf-user] OpenVpn 2.0

2005-05-11 Thread Michael D Schleif
Please, somebody comment on changes required to upgrade an existing v1.x openvpn installation to this new version? I have read about the enhancements, &c.; but, I am wondering whether or not an existing configuration will simply work in v2.0 ??? What do you think? * On 2005:04:28:16:47:31-0500

Re: [leaf-user] OpenVpn 2.0

2005-04-28 Thread Michael D Schleif
Is this a drop-in replacement for existing implementations? If not, howto find what requires change? Thank you. * "K.-P. Kirchdörfer" <[EMAIL PROTECTED]> [2005:04:27:18:54:31+0200] scribed: > Am Dienstag, 26. April 2005 12:41 schrieb Pascal OFFREDO: > > OpenVpn 2.0 final has been released > > >

Re: [leaf-user] OpenVpn 2.0

2005-04-27 Thread K.-P. Kirchdörfer
Am Dienstag, 26. April 2005 12:41 schrieb Pascal OFFREDO: > OpenVpn 2.0 final has been released > > Has anyone built a leaf package with this release ? For LEAF Bering-uClibc see http://leaf.sourceforge.net/bering-uclibc/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=3&MMN_position=3:

Re: [leaf-user] OpenVpn 2.0

2005-04-26 Thread Erich Titl
Pascal OFFREDO wrote: OpenVpn 2.0 final has been released Has anyone built a leaf package with this release ? Yes, for Bering 1.x regards Erich --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT

RE: [leaf-user] OpenVPN

2005-02-02 Thread Stefaan Van Dooren
irchdörfer Sent: dinsdag 1 februari 2005 20:58 To: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] OpenVPN Am Dienstag, 1. Februar 2005 10:55 schrieb Stefaan Van Dooren: > Hi, > > I'm using Bering uClibc 2.1 and I was wondering if anyone has allready > made a openvpn 2 pack

Re: [leaf-user] openvpn 2.x lrp for Bering 1.2?

2005-02-01 Thread Erich Titl
Rick Tibbs, Richard wrote: I would interested in an openvpn2.x lrp for libc... Preferably with ip route and lzo compiled in. You can try here http://leaf.think.ch/styx/pre/bin/openvpn-2.0_rc6/ It is not packaged, early pre whatever Just copy it to your existing openvpn location, possibly /u

Re: [leaf-user] OpenVPN

2005-02-01 Thread K.-P. Kirchdörfer
Am Dienstag, 1. Februar 2005 10:55 schrieb Stefaan Van Dooren: > Hi, > > I'm using Bering uClibc 2.1 and I was wondering if anyone has > allready made a openvpn 2 package for it (only can find a version > 1.6 on the site). I know version 2 is still beta, but I need some > of the new features.. 2.0

RE: [leaf-user] Openvpn problems -- again..

2004-12-18 Thread Tibbs, Richard
Rick. -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED] Sent: Saturday, December 18, 2004 6:05 PM To: Tibbs, Richard Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Openvpn problems -- again.. Tibbs, Richard wrote: >I am not sure the laptop needs a route to 192.168.10.0.

Re: [leaf-user] Openvpn problems -- again..

2004-12-18 Thread Erich Titl
Tibbs, Richard wrote: I am not sure the laptop needs a route to 192.168.10.0. In fact, although the tunnel between homefw and officefw is "working" -- I can ping either end of the tunnel IPs (10.1.10.1,2) from the other -- I can't get access to the individual subnets. Although there is no route t

RE: [leaf-user] Openvpn problems -- again..

2004-12-18 Thread Tibbs, Richard
EMAIL PROTECTED] Subject: Re: [leaf-user] Openvpn problems -- again.. Rick Tibbs, Richard wrote: >OK, I deleted the route directive on the wireless laptop and everything >works fine. I can ping each end of the tunnel from the other, etc. >Apparently the route directive is completely unn

Re: [leaf-user] Openvpn problems -- again..

2004-12-16 Thread Erich Titl
Rick Tibbs, Richard wrote: OK, I deleted the route directive on the wireless laptop and everything works fine. I can ping each end of the tunnel from the other, etc. Apparently the route directive is completely unnecessary in my situation on either end. Great it works for you, I have one quest

Re: [leaf-user] Openvpn problems -- again..

2004-12-16 Thread Erich Titl
Rick Tibbs, Richard wrote: Erich, The "float" directive in the bering openvpn.conf allows the WinXP wireless nic to get a variable IP. Since I am rebooting quite often, and LEAFs have no memory of the ip to mac address, so it would come up 192.168.1.3 or .4. OK, but still you are tunnelling thr

RE: [leaf-user] Openvpn problems -- again..

2004-12-16 Thread Tibbs, Richard
's show no dropped UDPs of port 5000, or 50001. Rick. -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 14, 2004 12:09 PM To: Tibbs, Richard Subject: Re: [leaf-user] Openvpn problems -- again.. Rick Tibbs, Richard wrote: >Dear list. >

RE: [leaf-user] Openvpn problems -- again..

2004-12-16 Thread Tibbs, Richard
te 10 -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED] Sent: Thursday, December 16, 2004 11:16 AM To: Tibbs, Richard; [EMAIL PROTECTED] Subject: Re: [leaf-user] Openvpn problems -- again.. Rick Tibbs, Ri

Re: [leaf-user] Openvpn problems -- again..

2004-12-16 Thread Erich Titl
Rick Tibbs, Richard wrote: the pt-to-pt tunnel needed to know how to get to the other. Not the endpoints, your local end point is a device which is linked to an address and knows the other end of the tunnel. The local and remote directives apparently take care of the routing issues. Apparentl

RE: [leaf-user] Openvpn problems -- again..

2004-12-16 Thread Tibbs, Richard
tween home & office. HTH Rick. -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 14, 2004 6:08 PM To: Tibbs, Richard Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Openvpn problems -- again.. Rick Tibbs, Richard wrote: >Erich, >The "float

RE: [leaf-user] Openvpn problems executing up-script

2004-12-05 Thread Tibbs, Richard
anks Erich! (et Jean-Pierre aussi) Rick. -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED] Sent: Sunday, December 05, 2004 4:59 AM To: Tibbs, Richard Subject: Re: [leaf-user] Openvpn problems executing up-script Rick Tibbs, Richard wrote: >Dear list: I experimented a b

RE: [leaf-user] Openvpn problems executing up-script

2004-12-04 Thread Tibbs, Richard
Dear list: I experimented a bit making the script #!/bin/sh -e /sbin/ip route add $1 $2 $3 $4 $5 $6 But same outcome "... shell failed with error status 1." I checked the -e parameter and it is stops the script immediately if any command fails. Higher up in daemon.log openvpn calls the script th

Re: [leaf-user] OpenVpn

2004-10-22 Thread Martin Hejl
Hi Scott, Scott Merrill wrote: I've just recently set up an OpenVPN 2.0 server. It's actually pretty straightforward, if you're at least somewhat familiar with the old 1.x operation. I have no doubt - the config-file is not the problem (especially since the sample configs provided should almost

Re: [leaf-user] OpenVpn

2004-10-22 Thread Scott Merrill
On Friday 22 October 2004 13:43, Martin Hejl wrote: > > In that case, you can contact Martin Hejl and see if he can port the 2.0 > > to LEAF. We are looking forward to it too. > > Well, a package is available at > > http://cvs.sourceforge.net/viewcvs.py/leaf/devel/hejl/ > > the reason that I haven'

Re: [leaf-user] OpenVpn

2004-10-22 Thread Martin Hejl
In that case, you can contact Martin Hejl and see if he can port the 2.0 to LEAF. We are looking forward to it too. Well, a package is available at http://cvs.sourceforge.net/viewcvs.py/leaf/devel/hejl/ the reason that I haven't "officially" published it until now is that there's no up to date doc

Re: [leaf-user] OpenVpn

2004-10-22 Thread M Lu
, October 22, 2004 9:54 AM Subject: Re: [leaf-user] OpenVpn > I forgot to explain that I have a firewall between my > clients and my leaf box. This firewall is a Border > Router, not on my responsability. I can only ask for > the opening of some ports. So, all clients must > conn

Re: [leaf-user] OpenVpn

2004-10-22 Thread Charles Steinkuehler
theoleyre fabrice wrote: Hi, I try to set up VPN with a leaf box. I want to create VPN tunnels between the router and several clients (Linux, WinXP, Win2K...). Some clients have a NATed connection, with private addresses, which cause some troubles with Ipsec. OpenVPN is interesting: a single udp po

Re: [leaf-user] OpenVpn

2004-10-22 Thread theoleyre fabrice
I forgot to explain that I have a firewall between my clients and my leaf box. This firewall is a Border Router, not on my responsability. I can only ask for the opening of some ports. So, all clients must connect to the leaf box via a single udp port. Client --- Internet --- Firewall --- LeafBox

Re: [leaf-user] OpenVpn

2004-10-22 Thread M Lu
I think you will be much better off with OpenVPN regarding NATed clients. You can have road-warriors with 1.6 but you have to use different port for each warrior. - Original Message - From: "theoleyre fabrice" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 22, 2004 9:14

Re: [leaf-user] openvpn + Unable to handle kernel NULL pointer ...

2004-05-22 Thread Martin Hejl
hey poh wrote: I wanted to setup a leaf vpn router with openvpn. I had also set up a window2k openvpn computer.When I try to connect these two the following msg shown in the console: Unable to handle kernel NULL pointer dereference at virtual address 003b *pde = Oops : CPU : 0

Re: [leaf-user] openvpn help

2004-05-20 Thread Martin Hejl
chiew yock sang wrote: From: Martin Hejl <[EMAIL PROTECTED]> In routerA, when i try to ping 192.168.99.2, the following commands shows: Virtual device tun0 asks to queue packet! ping: sendto: Network is down Hm, I've never seen that error - but I must say, I'm not quite sure how commands actually

Re: [leaf-user] openvpn help

2004-05-19 Thread chiew yock sang
From: Martin Hejl <[EMAIL PROTECTED]> In routerA, when i try to ping 192.168.99.2, the following commands shows: Virtual device tun0 asks to queue packet! ping: sendto: Network is down Hm, I've never seen that error - but I must say, I'm not quite sure how commands actually "pop up" - do you mean

Re: [leaf-user] openvpn help

2004-05-18 Thread Martin Hejl
chiew yock sang wrote: When i do netstat -an, the following shows: Proto Recv-Q Send-Q Local AddressForeign AddressState tcp 0 0 0.0.0.0:800.0.0.0:* Listen tcp 0 0 0.0.0.0:10230.0.0.0:* Listen netstat:

Re: [leaf-user] openvpn help

2004-05-18 Thread chiew yock sang
From: Martin Hejl <[EMAIL PROTECTED]> when i do netstat, it shows, netstat: no support for 'AF INET6 (tcp)' on this system netstat: no support for 'AF INET6 (udp)' on this system netstat: no support for 'AF INET6 (raw)' on this system Well "netstat -an" should produce more relevant results. When i

Re: [leaf-user] openvpn help

2004-05-18 Thread chiew yock sang
when i do netstat, it shows, netstat: no support for 'AF INET6 (tcp)' on this system netstat: no support for 'AF INET6 (udp)' on this system netstat: no support for 'AF INET6 (raw)' on this system Well "netstat -an" should produce more relevant results. When i do netstat -an, the following shows

Re: [leaf-user] openvpn help

2004-05-18 Thread Martin Hejl
chiew yock sang wrote: when i do ps aux, in the command line shows, /usr/sbin/openvpn --daemon --writepid /var/run/openvpn (the rest can't be seen). This means that openvpn is already running, so any attempt to start another instance (which is using the same config) will fail. when i do nets

Re: [leaf-user] openvpn help

2004-05-18 Thread chiew yock sang
From: Martin Hejl <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [leaf-user] openvpn help Date: Fri, 14 May 2004 19:41:12 +0200 chiew yock sang wrote: /etc/shorewall/tunnels (routerA) #type zonegatewaygateway zone openvpn: net 192.168.99.2 t

Re: [leaf-user] OpenVPN and routing

2004-05-14 Thread Martin Hejl
ALParada wrote: Are tun and tap devices associated with any one interface? Not that I know of - for all I know, they _are_ interfaces themselves. I forgot to ask: Is a "route add" command the best/only way to handle this situation? I'd say, the the easiest solution to set up is to use the "route"

Re: [leaf-user] openvpn help

2004-05-14 Thread Martin Hejl
chiew yock sang wrote: /etc/shorewall/tunnels (routerA) #type zonegatewaygateway zone openvpn: net 192.168.99.2 this is either a typo, or a problem - the error message you quoted later suggests openvpn runs on port 5000 - but in /etc/shorewall/tunnels you

Re: [leaf-user] OpenVPN and routing

2004-05-13 Thread ALParada
I forgot to ask: Is a "route add" command the best/only way to handle this situation? Thanks - Original Message - From: "ALParada" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, May 13, 2004 6:30 PM Subject: [leaf-user] OpenVPN and routing > > Setting up OpenVPN on uClibc

Re: [leaf-user] OpenVPN on Bering

2004-04-08 Thread Tom Eastep
I'm only posting a reply to the LEAF list since that is where I prefer Leaf Shorewall support to be handled. I also dislike getting involved in mail threads that are cross-posted on several lists. AdStar wrote: I'm trying to setup a VPN (openvpn version 1.5.0) connection from my home (ADSL, sta

Re: [leaf-user] OpenVPN

2003-12-24 Thread Steve Wright
On Tue, 2003-12-23 at 00:59, Informática. Cabildo de La Gomera wrote: > I´m trying to connect several offices, and I decided to use Bering uClib > > because it seems to be the most up to date branch. > > > > > After several problems with network drivers it´s starting to work, but > > now I ha

Re: [leaf-user] OpenVPN

2003-12-22 Thread Etienne Charlier
Hello, I use openvpn since 1 year with bering ( glibc) to connect 2 subnets through adsl ( pppoe) lines It's a wonderfull product. ( the easiest one to configure if both ends of the tunnel are connected with changing extrnal addresses). I only used static keys so far. I'm working on building a .lr

Re: [leaf-user] OpenVPN

2003-03-28 Thread Jacques Nilo
Le Jeudi 27 Mars 2003 21:46, Scott Merrill a écrit : > I've seen some posts (here and on the Shorewall list) about OpenVPN, so I > thought I'd take a look. I like what I see, and I'd like to try to > implement it on LEAF/Bering. > > Getting OpenVPN compiled for Bering is problematic, though. I fo

Re: [leaf-user] OpenVPN

2003-03-27 Thread Lynn Avants
On Thursday 27 March 2003 02:46 pm, Scott Merrill wrote: > Getting OpenVPN compiled for Bering is problematic, though. I followed the > Bering UML instructions for creating a virtual slink environment for > compiling userland programs, but the compilation of OpenVPN produced a > binary that did no