Re: Problem after upgrade to FreeBSD 14 + OpenSSL 3.0.12 + openvpn-2.6.8_1

Gert Doering <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <[email protected]>
Hi,

On Tue, Dec 12, 2023 at 03:26:00PM +0700, Budi Janto wrote:
> Only from local LAN (192.168.99.15), from outside WAN can not connected,
> otherwise if outside WAN connected, from local LAN can not connected. Before
> upgrade to FreeBSD 14.0 RELEASE, from local LAN & Outside WAN can be
> connected simultaneously.

I guess that this is a multihome-vs-dco thing.

FreeBSD 14 supports kernel level OpenVPN (DCO) and so does 2.6.x - but
on a server with multiple IP addresses, this does not (always?) work
correctly - we have an open bug for that, but nobody had time to really
closely look into it yet.

Can you try adding "disable-dco" and "multihome" to your server config?

("multihome" should be there already if the server has multiple IP
addresses, but "disable-dco" would be new)

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc (application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE-----

iQGcBAEBAgAGBQJleCKEAAoJEB2Cnv7KVigSmzkMAIBVK9Hle9tgWHAOQ6oWcxpb
Ab5/OPW0bJMrMGUv6JcrQ6oFx18fYqZr3eYb11i6C3xwSU/7GOQPjDCYIdrhhaTT
4G5ROFADhoDMbbvur0erNRHLlvIiwt1RQi8eSoJmrtUWylmwBEc1lXloIdnR+0dm
cO2SI9OtcccmVv2UtyUzUPWiXl9VAb4Qtf5l3YRNov2NBmIRqvYwwHNfo8HhaZ42
UBGDWXIlCquW0ryZo8jBfei4f6KmfABA8SpXVODKNK4EDrfpYATg7musu7twf6m6
HSlAkoG6s+YJhZuInATfOG4AKvebb4ci0rDFKXfmuCJ2RkKK8NR9n9wI5KgSxbf9
CMgbm3zVg7tcinl2T7P2vdT1Q7JEplZjFfTffCh7Ltd7YW2z2ZgIUWwYhVHLUDeU
BiZOnw3b8/uSNErB9rdVslRi1Gs1B/QhzonEoee9Gp9w9/63cdBYcWA+d0CxNbeV
/Ky/OSqAiM6dt/AzF5viIjqVaQjwT4JjIinm/ETquQ==
=DxY3
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.