Hi,

On Fri, Jun 10, 2016 at 02:34:26PM +0100, debbie10t wrote:
> VPNB modifies VPNA client configs to include
> --pull-filter reject ""

How would VPNB do that?

And what would stop them from just inserting any of the other options
(like, the x509 validation stuff) that leads to "this server stinks, go
try the next one" - having the same effect?

[..]
> IMO,
> if a client wants to ignore and continue using a VPN - OK
> if a client wants to reject a pushed item then there must
> be a real reason, otherwise just ignore.
> If a client believes a server is pushing maliciously then
> they would *not* want to connect again, until it is resolved.

This is a client decision.  As with most of OpenVPN, we just give them
rope.  If they want to hang themselves, they are free to.

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: signature.asc
Description: PGP signature

Reply via email to