I used to think that client without "nobind" option binds to 1194/udp (we encountered that issue with multiple openvpn connection on the same machine), so, "nobind" tells openvpn instance not to bind to udp/1194, and so, only openvpn server can exploit heartbleed vulnerability, but not any attacker.
2014-04-09 14:30 GMT+06:00 Arne Schwabe <a...@rfc2549.org>: > Am 09.04.14 10:25, schrieb Илья Шипицин: >> am I right that "nobind" option gives some protection to windows >> openvpn client ? >> > No. Nobind gives no protection. > > Arne