Is my connection timing out here?

Is my connection timing out here?

[jack seth]

I am trying to out my Openvpn config using DH parameters 16384 size keys (I know I know but it is testing :)). I am using my working config except for substituting my large keys. My config works with a 8192 sized DH but not with 16384. I am getting a 'inactivity timeout' from the server after about 3 minutes during the TLS handshake. I have read it will take longer to negotiate with these large keys. Based on other replies I have gotten I suspect that it is the linux/iptables connection that is timing out and not OpenVPN.

I have tried changing this command to a higher timeout number but it doesn't help. sudo sysctl -w net.netfilter.nf_conntrack_udp_timeout_stream=???

How can I track down what is happening here? 		 	   		  

RE: Is my connection timing out here?

[jack seth]

Could someone please provide some guidance on the below?  If there is a more appropriate list I should post to please let me know which one.  
----------------------------------------
> From: bird_112@hotmail.com
> To: netfilter@vger.kernel.org
> Subject: Is my connection timing out here?
> Date: Wed, 11 Mar 2015 12:46:33 -0500
>
> I am trying to out my Openvpn config using DH parameters 16384 size keys (I know I know but it is testing :)). I am using my working config except for substituting my large keys. My config works with a 8192 sized DH but not with 16384. I am getting a 'inactivity timeout' from the server after about 3 minutes during the TLS handshake. I have read it will take longer to negotiate with these large keys. Based on other replies I have gotten I suspect that it is the linux/iptables connection that is timing out and not OpenVPN.
>
> I have tried changing this command to a higher timeout number but it doesn't help. sudo sysctl -w net.netfilter.nf_conntrack_udp_timeout_stream=???
>
> How can I track down what is happening here? --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html