Hi,

On Fri, Apr 02, 2021 at 03:51:09PM -0400, Selva Nair wrote:
> As for sending data over the link, not sure I follow. Anything run
> with user's privileges after the tunnel is established can potentially
> use the tunnel.

I assume that this part relates to the synchronous nature of OpenVPN -
so, an --up script will not be able to use the VPN because OpenVPN is
not active (= waiting for the script to end) while the script runs.

Now, on Unix, an --up script could just trivially fork some background
activity

#!/bin/sh
  ( sleep 10 ; ping host_in_vpn ) &
exit 0

and that ping *would* work - without the ()&, it wouldn't.  BTDT :-)

On Windows, I have no idea how to run a background job from a .bat
file, but I'm sure there is a way - and in that case, if the foreground
job finishes, the background job would be able to use OpenVPN as well.

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to