Probably a REPLAY attack? OPENVPNopenvpn restrictionOpenVPN can't access internet (probably configuration error)OpenVPN WrapperGenerate an OpenVPN profile for client user to importStrange OpenVPN behavior - disconnects after one minuteGetting “Cannot ioctl TUNSETIFF tun: Operation not permitted” when trying to connect to OpenVPNOpenvpn Packet loss troublesOpenVPN gateway through OpenVPNOpenVPN-server disappointing performanceOpenVPN unable to disable encryption
How to address players struggling with simple controls?
Can I appeal credit ding if ex-wife is responsible for paying mortgage?
Is it possible to install Firefox on Ubuntu with no desktop enviroment?
Is there a risk to write an invitation letter for a stranger to obtain a Czech (Schengen) visa?
Converting 3x7 to a 1x7. Is it possible with only existing parts?
Arcane Tradition and Cost Efficiency: Learn spells on level-up, or learn them from scrolls/spellbooks?
Someone who is granted access to information but not expected to read it
Boss making me feel guilty for leaving the company at the end of my internship
How could I create a situation in which a PC has to make a saving throw or be forced to pet a dog?
How can this shape perfectly cover a cube?
Cant bend fingertip when finger is straight
Difference between "drift" and "wander"
Why not make one big CPU core?
...and then she held the gun
Should I email my professor to clear up a (possibly very irrelevant) awkward misunderstanding?
How to know whether to write accidentals as sharps or flats?
How would Japanese people react to someone refusing to say “itadakimasu” for religious reasons?
How do credit card companies know what type of business I'm paying for?
Bullying by school - Submitted PhD thesis but not allowed to proceed to viva until change to new supervisor
Background for black and white chart
How to make a villain when your PCs are villains?
At zero velocity, is this object neither speeding up nor slowing down?
Are soroban (Japanese abacus) classes worth doing?
Why can't we feel the Earth's revolution?
Probably a REPLAY attack? OPENVPN
openvpn restrictionOpenVPN can't access internet (probably configuration error)OpenVPN WrapperGenerate an OpenVPN profile for client user to importStrange OpenVPN behavior - disconnects after one minuteGetting “Cannot ioctl TUNSETIFF tun: Operation not permitted” when trying to connect to OpenVPNOpenvpn Packet loss troublesOpenVPN gateway through OpenVPNOpenVPN-server disappointing performanceOpenVPN unable to disable encryption
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Since a while my normal OPENVPN connection became really problematic...
There are Three symptoms:
- Extremely slow connection,
- My official bandwidth is getting fully occupied...
When I use UDP, this error is all over logs (as you can see more than 200,000 times in few minutes):
Thu May 30 20:43:12 2019 AEAD Decrypt error: bad packet ID (may be a replay): [ #207142 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
When I Use TCP I get even slower connection (again full bandwidth usage) but no error in logs.
No tun-mtu nor MSSFix altered the outcome...
(Tried lower mtu like 1300 on both sides with no success.)
Configs are pretty normal and the same as I was using for past year but all of a sudden everything is messed up.
Does it looks like a REPLAY ATTACK?
If true, Are there any solutions for it?
openvpn
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
add a comment |
Since a while my normal OPENVPN connection became really problematic...
There are Three symptoms:
- Extremely slow connection,
- My official bandwidth is getting fully occupied...
When I use UDP, this error is all over logs (as you can see more than 200,000 times in few minutes):
Thu May 30 20:43:12 2019 AEAD Decrypt error: bad packet ID (may be a replay): [ #207142 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
When I Use TCP I get even slower connection (again full bandwidth usage) but no error in logs.
No tun-mtu nor MSSFix altered the outcome...
(Tried lower mtu like 1300 on both sides with no success.)
Configs are pretty normal and the same as I was using for past year but all of a sudden everything is messed up.
Does it looks like a REPLAY ATTACK?
If true, Are there any solutions for it?
openvpn
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
Sounds like a problem on the other end of the tunnel. Do you have access to it?
– Ron Trunk
May 30 at 19:54
Yes, I can configure both server and client side...
– Amir Keyvan Tanara
May 30 at 20:34
add a comment |
Since a while my normal OPENVPN connection became really problematic...
There are Three symptoms:
- Extremely slow connection,
- My official bandwidth is getting fully occupied...
When I use UDP, this error is all over logs (as you can see more than 200,000 times in few minutes):
Thu May 30 20:43:12 2019 AEAD Decrypt error: bad packet ID (may be a replay): [ #207142 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
When I Use TCP I get even slower connection (again full bandwidth usage) but no error in logs.
No tun-mtu nor MSSFix altered the outcome...
(Tried lower mtu like 1300 on both sides with no success.)
Configs are pretty normal and the same as I was using for past year but all of a sudden everything is messed up.
Does it looks like a REPLAY ATTACK?
If true, Are there any solutions for it?
openvpn
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
Since a while my normal OPENVPN connection became really problematic...
There are Three symptoms:
- Extremely slow connection,
- My official bandwidth is getting fully occupied...
When I use UDP, this error is all over logs (as you can see more than 200,000 times in few minutes):
Thu May 30 20:43:12 2019 AEAD Decrypt error: bad packet ID (may be a replay): [ #207142 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
When I Use TCP I get even slower connection (again full bandwidth usage) but no error in logs.
No tun-mtu nor MSSFix altered the outcome...
(Tried lower mtu like 1300 on both sides with no success.)
Configs are pretty normal and the same as I was using for past year but all of a sudden everything is messed up.
Does it looks like a REPLAY ATTACK?
If true, Are there any solutions for it?
openvpn
openvpn
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
edited May 30 at 18:56
Amir Keyvan Tanara
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
asked May 30 at 17:25
Amir Keyvan TanaraAmir Keyvan Tanara
114
114
Sounds like a problem on the other end of the tunnel. Do you have access to it?
– Ron Trunk
May 30 at 19:54
Yes, I can configure both server and client side...
– Amir Keyvan Tanara
May 30 at 20:34
add a comment |
Sounds like a problem on the other end of the tunnel. Do you have access to it?
– Ron Trunk
May 30 at 19:54
Yes, I can configure both server and client side...
– Amir Keyvan Tanara
May 30 at 20:34
Sounds like a problem on the other end of the tunnel. Do you have access to it?
– Ron Trunk
May 30 at 19:54
Sounds like a problem on the other end of the tunnel. Do you have access to it?
– Ron Trunk
May 30 at 19:54
Yes, I can configure both server and client side...
– Amir Keyvan Tanara
May 30 at 20:34
Yes, I can configure both server and client side...
– Amir Keyvan Tanara
May 30 at 20:34
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f969536%2fprobably-a-replay-attack-openvpn%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f969536%2fprobably-a-replay-attack-openvpn%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Sounds like a problem on the other end of the tunnel. Do you have access to it?
– Ron Trunk
May 30 at 19:54
Yes, I can configure both server and client side...
– Amir Keyvan Tanara
May 30 at 20:34