Opened 5 years ago

Closed 4 years ago

#648 closed Bug / Defect (fixed)

Cant add WFP filter being fatal

Reported by: hildeb Owned by: valdikss
Priority: major Milestone: release 2.3.11
Component: Generic / unclassified Version: OpenVPN 2.3.10 (Community Ed)
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords:
Cc:

Description (last modified by Samuli Seppänen)

A user on Vista updated to 2.3.10 and cannot connect anymore:

--- OpenVPN log attached to this ticket ---

Is "Can't add WFP filter" the cause for that fatal error?

How can I find out WHY it could not be added?

Attachments (1)

description-of-ticket-648.txt (5.3 KB) - added by Samuli Seppänen 5 years ago.
Original description of ticket 648

Download all attachments as: .zip

Change History (10)

comment:1 Changed 5 years ago by Gert Döring

Owner: set to valdikss
Status: newassigned

comment:2 Changed 5 years ago by ValdikSS

Is "Can't add WFP filter" the cause for that fatal error?

Yes. Early versions of the patch threat it as non-fatal error but somebody wanted block-outside-dns to be a security feature and that's why it's fatal.

How can I find out WHY it could not be added?

I'm not really sure why too. I'll install Vista and check it out.

comment:3 Changed 5 years ago by ValdikSS

Oh my, oh my. It seems that Windows Vista doesn't support non-equal matching of application name and it's available only on Windows 7 and higher. I missed that. I will fix this and it would probably go to OpenVPN 2.3.11.
Right now please don't push block-outside-dns from server or tell your client to use route-nopull and manual settings in his/her config.

comment:4 Changed 5 years ago by ValdikSS

Hi,

Here are test installers based on latest Git code plus the Interactive service patch, which allows non-admin users to launch OpenVPN connections:

A second pair of installers contain a patch which makes the new --block-outside-dns work with Windows Vista:

If you test these, please let us know about your experience with them (worked/did not work/had issues).

Samuli Seppanen

Last edited 5 years ago by Samuli Seppänen (previous) (diff)

Changed 5 years ago by Samuli Seppänen

Original description of ticket 648

comment:5 Changed 5 years ago by Samuli Seppänen

Description: modified (diff)

comment:6 Changed 4 years ago by ValdikSS

Right now you can use updated plugin with 2.3.10
https://github.com/ValdikSS/openvpn-fix-dns-leak-plugin

comment:7 Changed 4 years ago by Gert Döring

commit 236769150f64087c590c718c76916ee3c8c9d3b5 (master)
commit 0209fafea2a4205c43d7952dcc5d32d2dbd353e5 (release/2.3)

Author: ValdikSS
Date: Sat Jan 16 02:35:38 2016 +0300

Update --block-outside-dns to work on Windows Vista

comment:8 Changed 4 years ago by Gert Döring

Milestone: release 2.3.11

comment:9 Changed 4 years ago by Samuli Seppänen

Resolution: fixed
Status: assignedclosed
Note: See TracTickets for help on using tickets.