Opened 8 years ago

Closed 8 years ago

#648 closed Bug / Defect (fixed)

Cant add WFP filter being fatal

Reported by: hildeb Owned by: valdikss
Priority: major Milestone: release 2.3.11
Component: Generic / unclassified Version: OpenVPN 2.3.10 (Community Ed)
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords:
Cc:

Description (last modified by Samuli Seppänen)

A user on Vista updated to 2.3.10 and cannot connect anymore:

--- OpenVPN log attached to this ticket ---

Is "Can't add WFP filter" the cause for that fatal error?

How can I find out WHY it could not be added?

Attachments (1)

description-of-ticket-648.txt (5.3 KB) - added by Samuli Seppänen 8 years ago.
Original description of ticket 648

Download all attachments as: .zip

Change History (10)

comment:1 Changed 8 years ago by Gert Döring

Owner: set to valdikss
Status: newassigned

comment:2 Changed 8 years ago by ValdikSS

Is "Can't add WFP filter" the cause for that fatal error?

Yes. Early versions of the patch threat it as non-fatal error but somebody wanted block-outside-dns to be a security feature and that's why it's fatal.

How can I find out WHY it could not be added?

I'm not really sure why too. I'll install Vista and check it out.

comment:3 Changed 8 years ago by ValdikSS

Oh my, oh my. It seems that Windows Vista doesn't support non-equal matching of application name and it's available only on Windows 7 and higher. I missed that. I will fix this and it would probably go to OpenVPN 2.3.11.
Right now please don't push block-outside-dns from server or tell your client to use route-nopull and manual settings in his/her config.

comment:4 Changed 8 years ago by ValdikSS

Hi,\r\n\r\nHere are test installers based on latest Git code plus the Interactive \r\nservice patch, which allows non-admin users to launch OpenVPN connections:\r\n\r\nhttp://build.openvpn.net/downloads/temp/openvpn-install-2.3_iservice-I601-i686.exe\r\nhttp://build.openvpn.net/downloads/temp/openvpn-install-2.3_iservice-I601-x86_64.exe\r\n\r\nA second pair of installers contain a patch which makes the new \r\n--block-outside-dns work with Windows Vista:\r\n\r\nhttp://build.openvpn.net/downloads/temp/openvpn-install-2.3_blockoutsidedns-I601-i686.exe\r\nhttp://build.openvpn.net/downloads/temp/openvpn-install-2.3_blockoutsidedns-I601-x86_64.exe\r\n\r\nIf you test these, please let us know about your experience with them \r\n(worked/did not work/had issues).\r\n\r\n-- \r\nSamuli Seppanen

Version 0, edited 8 years ago by ValdikSS (next)

Changed 8 years ago by Samuli Seppänen

Original description of ticket 648

comment:5 Changed 8 years ago by Samuli Seppänen

Description: modified (diff)

comment:6 Changed 8 years ago by ValdikSS

Right now you can use updated plugin with 2.3.10
https://github.com/ValdikSS/openvpn-fix-dns-leak-plugin

comment:7 Changed 8 years ago by Gert Döring

commit 236769150f64087c590c718c76916ee3c8c9d3b5 (master)
commit 0209fafea2a4205c43d7952dcc5d32d2dbd353e5 (release/2.3)

Author: ValdikSS
Date: Sat Jan 16 02:35:38 2016 +0300

Update --block-outside-dns to work on Windows Vista

comment:8 Changed 8 years ago by Gert Döring

Milestone: release 2.3.11

comment:9 Changed 8 years ago by Samuli Seppänen

Resolution: fixed
Status: assignedclosed
Note: See TracTickets for help on using tickets.