Subject: Re: [vserver] openvpn in vserver prob since kernel upgrade
From: Philippe Teuwen <phil@teuwen.org>
Date: Wed, 22 Aug 2007 23:06:21 +0200


> you do have:
> net/ipv4/ip_forward = 1
> right?
Err actually not!
When enabled, it works nice, thank!

Seems so stupid but still some stuffs disturb me:

I didn't have net.ipv4.ip_forward but I had 
net.ipv4.conf.default.forwarding as proposed in /etc/sysctl.conf of Debian:
# Uncomment the next line to enable packet forwarding for IPv4
net.ipv4.conf.default.forwarding=1
This worked well before with previous kernel with just that line.

And here when it was broken, forward was still working in one direction 
but not what came back.
That's why I blindly trusted ip_forward to be already =1

All this lacks some consistency... :-(

Anyway thanks again!