From nobody Fri Jul 05 15:47:46 2024
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WFyb11KQLz5PlDY
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Fri, 05 Jul 2024 15:47:57 +0000 (UTC)
	(envelope-from ml@netfence.it)
Received: from soth.netfence.it (mailserver.netfence.it [78.134.96.152])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "mailserver.netfence.it", Issuer "R11" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4WFyb056rJz4Lgy
	for <freebsd-net@FreeBSD.org>; Fri,  5 Jul 2024 15:47:56 +0000 (UTC)
	(envelope-from ml@netfence.it)
Authentication-Results: mx1.freebsd.org;
	none
Received: from [10.1.2.18] (mailserver.netfence.it [78.134.96.152])
	(authenticated bits=0)
	by soth.netfence.it (8.18.1/8.17.2) with ESMTPSA id 465Flkp7080839
	(version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO);
	Fri, 5 Jul 2024 17:47:46 +0200 (CEST)
	(envelope-from ml@netfence.it)
X-Authentication-Warning: soth.netfence.it: Host mailserver.netfence.it [78.134.96.152] claimed to be [10.1.2.18]
Message-ID: <20bf2eb4-7ed9-4c6f-8cfb-41d96073113c@netfence.it>
Date: Fri, 5 Jul 2024 17:47:46 +0200
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@FreeBSD.org
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: OpenVPN suddenly working one way only
Content-Language: en-US
To: "Rodney W. Grimes" <freebsd-rwg@gndrsh.dnsmgr.net>
Cc: Ronald Klop <ronald-lists@klop.ws>, freebsd-net@FreeBSD.org
References: <202407051432.465EWx23029110@gndrsh.dnsmgr.net>
From: Andrea Venturoli <ml@netfence.it>
In-Reply-To: <202407051432.465EWx23029110@gndrsh.dnsmgr.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.86
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:35612, ipnet:78.134.0.0/17, country:IT]
X-Rspamd-Queue-Id: 4WFyb056rJz4Lgy

On 7/5/24 16:32, Rodney W. Grimes wrote:

>> However, I just changed UDP port and it seems to work!

The "solution" didn't last: after a little more than 3 hours, this 
tunnel stopped working again :(

Strangely restarting openvpn on both sides fixed this, this time.




> Or host A has a zombie process with a UDP listen on the port?

It's host B listening as a server: host A connects to it.
So I guess I should look into host B...

And no, "netstat -na" show no udp4 line with the choosen port, after I 
stop openvpn.



To my ignorance, this reminds me of the "no buffer space available" I 
sometimes get with ping.
That's just a wild guess, of course, but I suspect something is wrong 
with UDP on the "server" host...


  bye & Thanks
	av.