Hi, On Fri, Jul 11, 2014 at 12:47:39PM +0200, Arne Schwabe wrote: > --- a/doc/openvpn.8 > +++ b/doc/openvpn.8 > @@ -2704,7 +2704,7 @@ on sufficiently fast hardware. SSL/TLS authentication > must > be used in this mode. > .\"********************************************************* > .TP > -.B \-\-server network netmask > +.B \-\-server network netmask ['nopool'] > A helper directive designed to simplify the configuration > of OpenVPN's server mode. This directive will set up an > OpenVPN server which will allocate addresses to clients > @@ -2739,6 +2739,9 @@ expands as follows: > if !nopool: > ifconfig-pool 10.8.0.2 10.8.0.254 255.255.255.0 > push "route-gateway 10.8.0.1" > + if redirect-gateway unset: > + redirect-gateway 10.8.0.1 > +
Typo here, this needs to be "route-gateway", of course. But the patch itself looks like an elegant way to get this done. It might not actually *work* on all platforms - windows (tap, ethernet, ARP!) might need this to be set to 10.8.0.2 - well, "anything that is not itself". Which won't be that hard to add either... is this in host format, as in "we can just add +1 to o->ifconfig_local and it will work cross-endian"? gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
pgpNpj5T8o7ln.pgp
Description: PGP signature