openvpn client dco connectivity issues @ 20250518113006_20250726122025

netblues

After upgrading from previous beta, lan clients can't connect via vpn.
However ping works as expected.

Disabling dco restores functionality.

Mode: Peer to Peer ( SSL/TLS )
Data Ciphers: AES-256-GCM, CHACHA20-POLY1305, AES-128-GCM
Digest: SHA256

I don't see anything strange in the configuration. (but then I have no hints on what changed/ where to look)

stephenw10

Can you give us more details here? You're connecting from a host on one side of the tunnel to another host on the other side, neither is the tunnel end device directly?

How exactly are you testing that?

The ping that works is between the same hosts?

netblues

@stephenw10
This issue was also combined with the pfblockermg issue, and it might be related
(although I can't find a relation with dco)

For starters the test doesn't involve any tunnel end devices.
Just hosts on both sites.
If its not pfblockerng, then someone else might also report it here.

Any plans for the next beta, with the pfblocker php fix included?
Or maybe a patch. (even though I could fix it manually too)