Re: Problem after upgrade to FreeBSD 14 + OpenSSL 3.0.12 + openvpn-2.6.8_1
Gert Doering <[email protected]>
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <[email protected]> |
Hi,
On Tue, Dec 12, 2023 at 03:26:00PM +0700, Budi Janto wrote:
> Only from local LAN (192.168.99.15), from outside WAN can not connected,
> otherwise if outside WAN connected, from local LAN can not connected. Before
> upgrade to FreeBSD 14.0 RELEASE, from local LAN & Outside WAN can be
> connected simultaneously.
I guess that this is a multihome-vs-dco thing.
FreeBSD 14 supports kernel level OpenVPN (DCO) and so does 2.6.x - but
on a server with multiple IP addresses, this does not (always?) work
correctly - we have an open bug for that, but nobody had time to really
closely look into it yet.
Can you try adding "disable-dco" and "multihome" to your server config?
("multihome" should be there already if the server has multiple IP
addresses, but "disable-dco" would be new)
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany [email protected]
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc
(application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE----- iQGcBAEBAgAGBQJleCKEAAoJEB2Cnv7KVigSmzkMAIBVK9Hle9tgWHAOQ6oWcxpb Ab5/OPW0bJMrMGUv6JcrQ6oFx18fYqZr3eYb11i6C3xwSU/7GOQPjDCYIdrhhaTT 4G5ROFADhoDMbbvur0erNRHLlvIiwt1RQi8eSoJmrtUWylmwBEc1lXloIdnR+0dm cO2SI9OtcccmVv2UtyUzUPWiXl9VAb4Qtf5l3YRNov2NBmIRqvYwwHNfo8HhaZ42 UBGDWXIlCquW0ryZo8jBfei4f6KmfABA8SpXVODKNK4EDrfpYATg7musu7twf6m6 HSlAkoG6s+YJhZuInATfOG4AKvebb4ci0rDFKXfmuCJ2RkKK8NR9n9wI5KgSxbf9 CMgbm3zVg7tcinl2T7P2vdT1Q7JEplZjFfTffCh7Ltd7YW2z2ZgIUWwYhVHLUDeU BiZOnw3b8/uSNErB9rdVslRi1Gs1B/QhzonEoee9Gp9w9/63cdBYcWA+d0CxNbeV /Ky/OSqAiM6dt/AzF5viIjqVaQjwT4JjIinm/ETquQ== =DxY3 -----END PGP SIGNATURE-----