Your message dated Wed, 29 Oct 2014 17:50:16 +0100
with message-id <[email protected]>
and subject line NM's fault
has caused the Debian Bug report #760214,
regarding openvpn: fails to execute /sbin/ip route add 0.0.0.0/1 via <gateway>
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
760214: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760214
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openvpn
Version: 2.3.2-9
Severity: normal
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dear Maintainer,
I was connecting through a VPN and realized that some website recognized
my VPN IP address, while some displayed my real IP.
The output of 'ip route' displayed my default gateway as my router,
instead of my VPN endpoint.
I have re-run openvpn and, in the output, I can see the following
command/entry:
Mon Sep 1 22:33:19 2014 /sbin/ip route add 0.0.0.0/1 via 10.4.0.5
But when I inspect ip route there is no record of it (removed my
endpoint IP)
root@Chuck:/home/claudio# ip ro
default via 192.168.1.1 dev wlan0 proto static metric 1024
10.4.0.1 via 10.4.0.5 dev tun0 proto static metric 20
10.4.0.5 dev tun0 proto kernel scope link src 10.4.0.6
128.0.0.0/1 via 10.4.0.5 dev tun0 proto static metric 20
169.254.0.0/16 dev wlan0 scope link metric 1000
XXX.XXX.XXX.XXX via 192.168.1.1 dev wlan0
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.16
If I manually run
/sbin/ip route add 0.0.0.0/1 via 10.4.0.5
then everything works fine.
All the other entries are present.
This are the last entries of the log (removed my MAC address); this did
not work even before I added bypass-dhcp to my VPN server config, so
it's safe to assume that's not the issue.
Mon Sep 1 22:33:19 2014 PUSH: Received control message:
'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS
8.8.8.8,route 10.4.0.1,topology net30,ping 10,ping-restart 120,ifconfig
10.4.0.6 10.4.0.5'
Mon Sep 1 22:33:19 2014 OPTIONS IMPORT: timers and/or timeouts modified
Mon Sep 1 22:33:19 2014 OPTIONS IMPORT: --ifconfig/up options modified
Mon Sep 1 22:33:19 2014 OPTIONS IMPORT: route options modified
Mon Sep 1 22:33:19 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option
options modified
Mon Sep 1 22:33:19 2014 ROUTE_GATEWAY 192.168.1.1/255.255.255.0
IFACE=wlan0 HWADDR=XX:XX:XX:XX:XX:XX
Mon Sep 1 22:33:19 2014 TUN/TAP device tun0 opened
Mon Sep 1 22:33:19 2014 TUN/TAP TX queue length set to 100
Mon Sep 1 22:33:19 2014 do_ifconfig, tt->ipv6=0,
tt->did_ifconfig_ipv6_setup=0
Mon Sep 1 22:33:19 2014 /sbin/ip link set dev tun0 up mtu 1500
Mon Sep 1 22:33:19 2014 /sbin/ip addr add dev tun0 local 10.4.0.6 peer
10.4.0.5
Mon Sep 1 22:33:19 2014 /sbin/ip route add 178.63.125.170/32 via
192.168.1.1
Mon Sep 1 22:33:19 2014 /sbin/ip route add 0.0.0.0/1 via 10.4.0.5
Mon Sep 1 22:33:19 2014 /sbin/ip route add 128.0.0.0/1 via 10.4.0.5
Mon Sep 1 22:33:19 2014 /sbin/ip route add 10.4.0.1/32 via 10.4.0.5
Mon Sep 1 22:33:19 2014 Initialization Sequence Completed
Let me know if there's any additional information I can provide.
- -- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (1001, 'unstable'), (600, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.14-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages openvpn depends on:
ii debconf [debconf-2.0] 1.5.53
ii initscripts 2.88dsf-53.4
ii iproute2 3.16.0-1
ii libc6 2.19-10
ii liblzo2-2 2.08-1
ii libpam0g 1.1.8-3.1
ii libpkcs11-helper1 1.11-1
ii libssl1.0.0 1.0.1i-2
Versions of packages openvpn recommends:
ii easy-rsa 2.2.2-1
Versions of packages openvpn suggests:
ii openssl 1.0.1i-2
pn resolvconf <none>
- -- Configuration Files:
/etc/default/openvpn changed:
AUTOSTART="none"
OPTARGS=""
OMIT_SENDSIGS=0
- -- debconf information:
openvpn/create_tun: false
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAlQE6VAACgkQZ0Gi6TDJB+cmfACgk/LVgDSb0kskgQQ8n1IqJ3cl
6+wAnA3wklpE5e6/CsAIBssjmWxHDEYT
=jLHZ
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Nothing more to say here. Thanks.
--
Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico
mailto/sip: [email protected] | en GNU/Linux y software libre
Encrypted mail preferred | http://inittab.com
Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D 4BF2 009B 3375 6B9A AA55
--- End Message ---