UDP problem…



I found a peculiar problem while I was setting up an openvpn link the other day. The goal was a simple shared key setup and I started with the sample configuration and modified it a bit to fit the circumstances, I allowed the correct UDP port through the firewall (I think 1194 if I recall correctly) and … it didn’t work. So…. I started over and worked from empty config files and put in the bare minimums… it still didn’t work – no appearance that it was making the connection at all to negotiate the link. I double and triple checked the firewall config/restarted it… nothing Then I decided to try TCP instead of a UDP port. Changed the firewall config to allow the TCP traffic on 1194, adjusted the server and client config and lo and behold it worked. The firewall in question….


Is a VERY old and due for software rebuild Mandrake SNF (Single Network Firewall). I had hoped to be able to go the upgrade route to the MNF series, but license changes there have made the price for them out of reason. (And if I were to do it, I’d have to make too many modifications to make it worth doing). Of course, MNF2 isn’t freely available at all (as per my last check.) So… IPcop may be in the future for that setup.

The bottom line is that there seems to be something funky with UDP and this Mandrake SNF install. The moral of the story may be to consider TCP if you run into problems with a UDP connection over a firewall (and can choose the protocol.)

Related Posts

Blog Traffic Exchange Related Posts
  • Network Security guide for the home or small business network - Part 2 - A Software Firewall Do I really need a hardware firewall? I'm running XP Service Pack 2 with the built in firewall? (or norton, or zonealarm?) Well, personal firewalls (the name that software firewalls go by) are good for a great many things that hardware firewalls AREN'T. They do have their limitations though and......
  • Ping not working? try ARP I'll confess to having a lot to learn about IP ethernet networking. I feel pretty comfortable with basic TCP/IP (v4), the concept of UDP vs. TCP ports, ICMP pings, etc... but ARP is something that I haven't dabbled much with. It is, of course, a layer that TCP depends on.......
  • Ultravnc for remote computer support A little while back I talked some about TightVNC which for a long time has been my favorite implementation of a remote framebuffer, or remote desktop viewing protocol known as VNC (Virtual Network Computing.) The original VNC (now realvnc) came out of AT&T research labs in the UK and has......
Blog Traffic Exchange Related Websites
  • 5 Easy Coin Collecting Mistakes Coin collecting is something that is fun for all ages and all personalities, as individuals can find their own reasons to want to have a collection. Each collection is unique and reflects the personality of the collector. If you are thinking about getting into coin collecting you are going to......
  • Swom Review: First Let's Start With The Bad Stuff Swom Review: I have been a gold member of Swom For about 2 months now. So I feel this is a good time to share with you what my opinion of this site is. First let's start with the bad stuff Swom is a very basic social network , you......
  • Social Security Spouse Benefits - Key Concepts Do you understand how Social Security retirement benefits work for (and with) your spouse? If not, you are not alone. Here is a summary of some key concepts in claiming and receiving a benefit as a husband or wife of a Social Security retiree. Claiming a Spousal Social Security......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site