[Openswan Users] Port 3389

[Richard Abbuhl]

I changed my ipsec.conf and added the overridemtu=1200 although both eth0 and eth0 have an mtu of 1200 (set using ifconfig).  I used tcpdump to trace the output.
 
   20:06:33.862032 IP rabbuhl.demon.nl > 172.xx.xx.x: icmp 556: 192.xxx.x.x unreachable - need to frag (mtu 1200)
 
and then later
 
   20:23:54.639791 IP ns-cache-1.ns.nl.demon.net.domain > rabbuhl.xxxxx.nl.32773:  766 ServFail 0/0/0 (42)
   20:23:54.639870 IP rabbuhl.xxxxx.nl > ns-cache-1.ns.nl.demon.net: icmp 78: rabbuhl.xxxxx.nl udp port 32773 unreachable
   20:23:54.640907 IP ns-cache-1.ns.nl.demon.net.domain > rabbuhl.xxxxx.nl.32773:  766 ServFail 0/0/0 (42)
   20:23:54.640924 IP rabbuhl.xxxxx.nl > ns-cache-1.ns.nl.demon.net: icmp 78: rabbuhl.xxxxx.nl udp port 32773 unreachable
   20:24:01.043361 IP ns-cache-2.ns.nl.demon.net.domain > rabbuhl.xxxxx.nl.32772:  766 ServFail 0/0/0 (42)
   20:24:01.043434 IP rabbuhl.xxxxx.nl > ns-cache-2.ns.nl.demon.net: icmp 78: rabbuhl.xxxxx.nl udp port 32772 unreachable

Any suggestions?
 
-----Original Message-----
From: users-bounces at lists.openswan.org [mailto:users-bounces at lists.openswan.org] On Behalf Of Tiago Freitas Leal
Sent: Thursday, July 29, 2004 3:38 PM
To: users at lists.openswan.org
Subject: Re: [Openswan Users] Port 3389
 
I solved that problem with:
 
config setup
    overridemtu=1400
 
Cheers
	----- Original Message ----- 
	From: Richard Abbuhl <mailto:rabbuhl at VoCognition.com>  
	To: users at lists.openswan.org 
	Sent: Thursday, July 29, 2004 1:17 PM
	Subject: [Openswan Users] Port 3389
	 
	Hi,
	 
	Openswan is working except for Remote Desktop Connections.  It seems that somehow port 3389 is not being allowed through although I seem to get an initial connection.  What is the best way to trace this problem?  Do I need a special firewall rule to open an "outgoing" port (as opposed to an "incoming" port)?
	 
	Thanks in advance,
	 
	Richard
	
________________________________

	_______________________________________________
	Users mailing list
	Users at lists.openswan.org
	http://lists.openswan.org/mailman/listinfo/users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20040729/9483c157/attachment-0001.htm