Afterburner,设置需要一番

额，去年没封 80 时候搭建了个博客，严打时候，直接断网，电信打电话说不关服务器就不给你开网。关了服务器给开网后 80/8080 就封了。现在就是花生壳:端口访问了

电脑报合订版一大堆

@c3824363 了解

@c3824363 Windows 沒測試過，我 Debian9 測試確實是 symmetric

@p64381 普通千 M 华为无线路由器

@00oo00 了解了，3q

重庆电信公网 IP，路由拨号，一样是 symmetric

@StederLee 用过 openvpn 感觉 UDP 通道不怎么稳定，容易断流

@halczy OK 好了

@cwbsw 还是习惯于用软件的方式连接，你的这个方法比我的还折腾

@alect auth = "plain[passwd=/etc/ocserv/ocpasswd]"
listen-host = 0.0.0.0
tcp-port = 68
udp-port = 68
run-as-user = nobody
run-as-group = daemon
socket-file = /var/run/ocserv-socket
server-cert = /etc/ocserv/ssl/server-cert.pem
server-key = /etc/ocserv/ssl/server-key.pem
ca-cert = /etc/ocserv/ssl/ca-cert.pem
isolate-workers = true
banner = "Welcome to John's Server!"
max-clients = 16
max-same-clients = 2
server-stats-reset-time = 604800
keepalive = 32400
dpd = 90
mobile-dpd = 1800
switch-to-tcp-timeout = 25
# try-mtu-discovery = false
tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-VERS-SSL3.0"
auth-timeout = 240
min-reauth-time = 300
max-ban-score = 80
ban-reset-time = 1200
cookie-timeout = 300
deny-roaming = false
rekey-time = 172800
rekey-method = ssl
use-occtl = true
pid-file = /var/run/ocserv.pid
device = vpn
predictable-ips = true
default-domain = zhouyut001.vicp.cc

ipv4-network = 192.168.1.0
ipv4-netmask = 255.255.255.0
# An alternative way of specifying the network:
#ipv4-network = 192.168.1.0/24
# The IPv6 subnet that leases will be given from.
#ipv6-network = fda9:4efe:7e3b:03ea::/48
# Specify the size of the network to provide to clients. It is
# generally recommended to provide clients with a /64 network in
# IPv6, but any subnet may be specified. To provide clients only
# with a single IP use the prefix 128.
#ipv6-subnet-prefix = 128
#ipv6-subnet-prefix = 64
tunnel-all-dns = true
dns = 192.168.3.55
ping-leases = false
# route = 10.10.10.0/255.255.255.0
# route = 192.168.0.0/255.255.0.0
# route = fef4:db8:1000:1001::/64
# route = default
# no-route = 192.168.5.0/255.255.255.0
cisco-client-compat = true
dtls-legacy = true

@alect 我用的这个帖子搭建的，你看看。https://doub.io/vpnzy-6/

@mandymak 注释后服务无法启动

@halczy OK 我试试。对了，我使用 dnsmasq 作为 DNS 查询时老是连接 VPN 后 5 分钟内能查询 DNS，超过 5 分钟左右就无法查询 DNS 了，直接无法获取域名 IP，郁闷

重庆电信屁消息没有，失望

水垫？！