From 15a39afd11950d827914ab0591c416cf1ef03172 Mon Sep 17 00:00:00 2001 From: ValdikSS Date: Sun, 15 Nov 2015 13:34:44 +0300 Subject: [PATCH] Do not allow OpenVPN to set (low) buffer sizes --- openvpn-install.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/openvpn-install.sh b/openvpn-install.sh index adf7a90..60ba79f 100644 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -222,6 +222,8 @@ else echo "port $PORT proto udp dev tun +sndbuf 0 +rcvbuf 0 ca ca.crt cert server.crt key server.key @@ -335,6 +337,8 @@ crl-verify /etc/openvpn/easy-rsa/pki/crl.pem" >> /etc/openvpn/server.conf echo "client dev tun proto udp +sndbuf 0 +rcvbuf 0 remote $IP $PORT resolv-retry infinite nobind