On 2017-10-03 08:21 AM, Jörg Frings-Fürst wrote: > setting ProtectSystem=full is not in all cases a good idea. So openvpn > must be able to make changes to the /etc/resolv.conf.
On Ubuntu at least, /etc/resolv.conf is a symlink to /run/resolvconf/resolv.conf so ProtectSystem=full doesn't get in the way of the "update-resolv-conf" script. Maybe that's not the case on typical Debian clients? Regards, Simon
signature.asc
Description: OpenPGP digital signature
