[Openvpn-users] macox dns help for a novice?

2014-09-02 Thread Jason Haar
Hi there I'm trying to get openvpn working on a Mac client for the first time (tun mode), it's all working at the IP layer, but I want to get the "scoped DNS" bit working too: ie tell the Mac to send DNS lookups for *.company.domain through the tunnel to corporate DNS servers, and use the default

Re: [Openvpn-users] Openvpn logout time?

2014-09-02 Thread Jason Haar
On 03/09/14 10:56, Mathias Jeschke wrote: > If you use the "hammer", the machine is not able to send a TCP FIN, I don't think that's the case. "Hammering" a user process does not influence how the TCP stack operates (kernel space vs user space) - it would generate a TCP reset. Of course, unplugg

Re: [Openvpn-users] Openvpn logout time?

2014-09-02 Thread Mathias Jeschke
Hi, On 03/09/14 00:28, Jason Haar wrote: [...] > TCP - being below openvpn - doesn't suffer > from this issue of course, the server always sees the TCP FIN/RSET > packet and "knows" the client is no more. AFAIK, this works only if TCP keepalive enabled, which depends on the OS or keepalive on

Re: [Openvpn-users] Openvpn logout time?

2014-09-02 Thread Jason Haar
On 03/09/14 10:05, David Sommerseth wrote: > Just to explain --explicit-exit-notify slightly more. This is a > client-side option, which will notify the server when the client > disconnects. Otherwise the server will keep the connection state open > until the connection times out (defined by --pi

Re: [Openvpn-users] Openvpn logout time?

2014-09-02 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (I don't top-post, reply at bottom) On 02/09/14 21:50, debbie...@gmail.com wrote: > If you are using UDP see --explicit-exit-notify in the Manual. > https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage > > - Original Message - From: "

[Openvpn-users] (no subject)

2014-09-02 Thread bb_ll_dd
Sent from Windows Mail-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net http

[Openvpn-users] (no subject)

2014-09-02 Thread loyal loyaly
-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/li

[Openvpn-users] (no subject)

2014-09-02 Thread loyal loyaly
-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/li

Re: [Openvpn-users] Openvpn logout time?

2014-09-02 Thread debbie10t
If you are using UDP see --explicit-exit-notify in the Manual. https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage - Original Message - From: "Simon Vargas" To: Sent: Tuesday, September 02, 2014 11:59 AM Subject: [Openvpn-users] Openvpn logout time? > Hello > > I working on a

[Openvpn-users] Openvpn logout time?

2014-09-02 Thread Simon Vargas
Hello    I working on a simple script which gathers all the users login/logout time and ip from openvpn log files and possibly the failed login attempts with bad certificates/passwords as well. I can find the client's ips and login times by searching for "VERIFY OK: depth=1" keyword but it se

Re: [Openvpn-users] is it safe to let all clients negotiate tls-ciphers?

2014-09-02 Thread Steffan Karger
Hi, On Mon, Sep 1, 2014 at 4:15 PM, Jan Just Keijser wrote: > On 01/09/14 00:55, Jason Haar wrote: >> So am I correct in >> saying that an openvpn network using tls-auth plus client certs should >> be effectively immune to MiTM attacks, thereby making it OK to leave as >> much decision making as