Re: [Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-26 Thread Jason Haar
On 26/08/15 20:35, Arne Schwabe wrote: > Okay yes. Active FTP is broken by our simple nat implementation. But I > think FTP, let alone active FTP is dead. I am not sure if we should > support this in our simple NAT implementation. I agree. Surely this would be the beginning of a complete beat-up?

Re: [Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-26 Thread Rafael Gava
Hi JJK, "client-ip" instead of "localhost" sounds good to me. BR Gava On Wed, Aug 26, 2015 at 10:01 AM, Jan Just Keijser wrote: > Hi, > > Rafael Gava wrote: > >> >> this is my first submission to the list and I hope that I'm doing in the >> right way. :-) >> >> >> Well,

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-26 Thread David Sommerseth
On 24/08/15 18:54, Boris Lytochkin wrote: > Hi. > > Author: Boris Lytochkin > Sponsored-by: Yandex LLC > > Log serial number of revoked certificate > > In most of situations admin of OpenVPN server needs to know which > particular certificate is used by client. > In

Re: [Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-26 Thread Jan Just Keijser
Hi, Rafael Gava wrote: this is my first submission to the list and I hope that I'm doing in the right way. :-) Well, the features added to Network Address Translator are: 1) Allow the user to use the string "localhost" on the client-nat network configuration in a way that is not

Re: [Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-26 Thread Rafael Gava
Hi Arne, thanks for the prompt feedback. please see comments in-line: Thanks in advance, Rafael On Wed, Aug 26, 2015 at 5:35 AM, Arne Schwabe wrote: > > > Am 26.08.15 um 03:43 schrieb Rafael Gava: > > Hi, > > this is my first submission to the list and I hope that I'm doing

Re: [Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-26 Thread Arne Schwabe
Am 26.08.15 um 03:43 schrieb Rafael Gava: > Hi, > > this is my first submission to the list and I hope that I'm doing in > the right way. :-) > Yes submitting patches to the list is the preferred way. I haven't looked in the patch yet. I am first trying to understand the goal of the patches. >

[Openvpn-devel] [PATCH] Added two features to Network Address Translator

2015-08-26 Thread Rafael Gava
Hi, this is my first submission to the list and I hope that I'm doing in the right way. :-) Well, the features added to Network Address Translator are: 1) Allow the user to use the string "localhost" on the client-nat network configuration in a way that is not necessary to inform the IP