Beiträge von nort

  • Webinterface TOT nach neustart

    hab nochwas gefunden

    INPUTFW:DROP TCP (br0) ip-vom-client:52888 -> ip-von-der-endian:10443-MAC=xx:xx:xx:db:70:7a:bc:ae:c5:1e:95:3c:08:00 LEN=48 TOS=00 PREC=0x00 TTL=128 ID=6019 DF SEQ=4291907586 ACK=0 WINDOW=8192 SYN URGP=0 MARK=1800

  • Webinterface TOT nach neustart

    Moin Leute,

    ich habe der endian gestern vorm feierabend den befehl gegeben um 21:00 neu zu starten und als ich heute morgen zur arbeit gekommen bin war das web interface tot :o .
    den httpd habe ich auch schon neugestartet aber hat nichts geändert.

    gruß

    Alex

    hab gerade festgestellt das ich von aussen rankomme aber von innen gehts nicht :shock::?::?
    also von grün auf webinteface geht nicht aber von rot geht :o

    auszug aus dem httpd log von heute :

    auszug aus dem httpd log von gestern :

  • netzwerk speed sperre ?

    hallo leute,

    kann das sein das die 2.2 eine geschwindigkeits sperre ungefähr bei 4000KBit/s hat?
    hab eine 2.2 aufgebaut mit proxy fw usw hw ist 1gb ram celeron 2Ghz
    an ner 16000 inet leitung ohne endian gemessen 15300kbit/s mit endian 4000kbit/s
    top bringt auch nichts auffälliges.
    was kann das sein ?

    gruß Alex

  • openvpn client + windows7 verzweifelung

    Hallo,

    ich habe es mal mit deiner config probiert aber wieder das selbe unter windows xp geht es under win7 gehts nicht.
    entweder bin ich oder windows7 zu doof :?:

    efw ist eine 2.2 community

    config:

    client
    dev tap
    remote xxxxxxxxx.dyndns.org
    port 1194
    proto udp
    ca cacert.pem
    nobind
    comp-lzo
    persist-key
    persist-tun
    verb 3
    auth-user-pass


    fehlermeldung:

    Wed Oct 13 13:36:39 2010 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010
    Wed Oct 13 13:36:51 2010 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
    Wed Oct 13 13:36:51 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    Wed Oct 13 13:36:52 2010 LZO compression initialized
    Wed Oct 13 13:36:52 2010 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
    Wed Oct 13 13:36:52 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
    Wed Oct 13 13:36:53 2010 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
    Wed Oct 13 13:36:53 2010 Local Options hash (VER=V4): 'd79ca330'
    Wed Oct 13 13:36:53 2010 Expected Remote Options hash (VER=V4): 'f7df56b8'
    Wed Oct 13 13:36:53 2010 UDPv4 link local: [undef]
    Wed Oct 13 13:36:53 2010 UDPv4 link remote: xxx.xxx.xxx.xxx:1194
    Wed Oct 13 13:36:53 2010 TLS: Initial packet from xxx.xxx.xxx.xxx:1194, sid=bdb936dc d0b4db43
    Wed Oct 13 13:36:53 2010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    Wed Oct 13 13:36:53 2010 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=IT/O=efw/CN=efw_CA
    Wed Oct 13 13:36:53 2010 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
    Wed Oct 13 13:36:53 2010 TLS Error: TLS object -> incoming plaintext read error
    Wed Oct 13 13:36:53 2010 TLS Error: TLS handshake failed
    Wed Oct 13 13:36:53 2010 TCP/UDP: Closing socket
    Wed Oct 13 13:36:53 2010 SIGUSR1[soft,tls-error] received, process restarting
    Wed Oct 13 13:36:53 2010 Restart pause, 2 second(s)
    Wed Oct 13 13:36:55 2010 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
    Wed Oct 13 13:36:55 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    Wed Oct 13 13:36:55 2010 Re-using SSL/TLS context
    Wed Oct 13 13:36:55 2010 LZO compression initialized
    Wed Oct 13 13:36:55 2010 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
    Wed Oct 13 13:36:55 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
    Wed Oct 13 13:36:56 2010 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
    Wed Oct 13 13:36:56 2010 Local Options hash (VER=V4): 'd79ca330'
    Wed Oct 13 13:36:56 2010 Expected Remote Options hash (VER=V4): 'f7df56b8'
    Wed Oct 13 13:36:56 2010 UDPv4 link local: [undef]
    Wed Oct 13 13:36:56 2010 UDPv4 link remote: xxx.xxx.xxx.xxx:1194
    Wed Oct 13 13:36:56 2010 TLS: Initial packet from xxx.xxx.xxx.xxx:1194, sid=049a1e0b 0557f7a2
    Wed Oct 13 13:36:56 2010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    Wed Oct 13 13:36:56 2010 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=IT/O=efw/CN=efw_CA
    Wed Oct 13 13:36:56 2010 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
    Wed Oct 13 13:36:56 2010 TLS Error: TLS object -> incoming plaintext read error
    Wed Oct 13 13:36:56 2010 TLS Error: TLS handshake failed
    Wed Oct 13 13:36:56 2010 TCP/UDP: Closing socket
    Wed Oct 13 13:36:56 2010 SIGUSR1[soft,tls-error] received, process restarting
    Wed Oct 13 13:36:56 2010 Restart pause, 2 second(s)

  • openvpn client + windows7 verzweifelung

    also ich habe es hinbekommen den open vpn client im windows xp hinzubekommen mit diese konfig :

    client
    dev tap
    ;dev-node MyTap
    ;proto tcp
    proto udp
    remote xxx.xxx.xxx.xxx 1194
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    ;http-proxy-retry # retry on connection failures
    ;http-proxy [proxy server] [proxy port #]
    ;mute-replay-warnings
    ca cacert.pem
    auth-user-pass
    ;ns-cert-type server
    ;tls-auth ta.key 1
    ;cipher x
    comp-lzo
    verb 3
    ;mute 20

    aber unter windoof7 funzt das nicht kommt immer fehlermeldung

    Wed Oct 06 16:03:56 2010 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010
    Wed Oct 06 16:04:07 2010 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
    Wed Oct 06 16:04:07 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    Wed Oct 06 16:04:09 2010 LZO compression initialized
    Wed Oct 06 16:04:09 2010 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
    Wed Oct 06 16:04:09 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
    Wed Oct 06 16:04:09 2010 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
    Wed Oct 06 16:04:09 2010 Local Options hash (VER=V4): 'd79ca330'
    Wed Oct 06 16:04:09 2010 Expected Remote Options hash (VER=V4): 'f7df56b8'
    Wed Oct 06 16:04:09 2010 UDPv4 link local: [undef]
    Wed Oct 06 16:04:09 2010 UDPv4 link remote: xxx.xxx.xxx.xxx:1194
    Wed Oct 06 16:04:09 2010 TLS: Initial packet from xxx.xxx.xxx.xxx:1194, sid=740db08f 85ab6269
    Wed Oct 06 16:04:09 2010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    Wed Oct 06 16:04:10 2010 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=IT/O=efw/CN=efw_CA
    Wed Oct 06 16:04:10 2010 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
    Wed Oct 06 16:04:10 2010 TLS Error: TLS object -> incoming plaintext read error
    Wed Oct 06 16:04:10 2010 TLS Error: TLS handshake failed
    Wed Oct 06 16:04:10 2010 TCP/UDP: Closing socket
    Wed Oct 06 16:04:10 2010 SIGUSR1[soft,tls-error] received, process restarting
    Wed Oct 06 16:04:10 2010 Restart pause, 2 second(s)
    Wed Oct 06 16:04:12 2010 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
    Wed Oct 06 16:04:12 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    Wed Oct 06 16:04:12 2010 Re-using SSL/TLS context
    Wed Oct 06 16:04:12 2010 LZO compression initialized
    Wed Oct 06 16:04:12 2010 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
    Wed Oct 06 16:04:12 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
    Wed Oct 06 16:04:24 2010 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
    Wed Oct 06 16:04:24 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    Wed Oct 06 16:04:24 2010 Re-using SSL/TLS context
    Wed Oct 06 16:04:28 2010 TCP/UDP: Closing socket
    Wed Oct 06 16:04:28 2010 SIGUSR1[soft,tls-error] received, process restarting
    Wed Oct 06 16:04:28 2010 Restart pause, 2 second(s)

    was mache ich falsch wie gesagt unter windows xp funzt es unter windwos7 kommt die fehlermeldung als client habe ich openvpn 2.1.3 genutzt und
    mit dem securepoint vpn client habe ich es auch probiert.
    securepoint client config :

    client
    comp-lzo
    float
    nobind
    persist-key
    persist-tun
    auth-user-pass
    dev tap
    remote xxx.xxx.xxx.xxx 1194
    proto udp
    ca "efw1.pem"
    cert "efw1.pem"
    key "efw1.pem"
    ns-cert-type server
    mssfix
    route-method exe
    verb 3
    route-delay 2
    remote-random
    resolv-retry infinite


    gruß Alex