Hi
Thanks for your tip.
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA256
>
>Hi,
>
>Sent with ProtonMail secure email.
>------- Original Message -------
>On Friday, April 29th, 2022 at 16:52, Stella Ashburne <rewe...@gmx.com> wrote:
>
><snip>
>
>> Any tips as to how I can configure my client-side config file to prevent
>> IPv6 routes from being added during the connections?
>
>You could try --pull-filter-ignore 'route-ipv6 '
>It could break everything though ..
>
>See the docs for details.
>
>tct
Below is the connection log when I included the following option
pull-filter ignore route-ipv6
in my client configuration file.
2022-04-28 20:23:17 Successful ARP Flush on interface [20]
{FB1A746D-116A-471A-A0B3-6017A1BF137A}
2022-04-28 20:23:17 MANAGEMENT:
>STATE:1651321397,ASSIGN_IP,,10.5.0.3,,,,,fdda:d0d0:cafe:443::1001
2022-04-28 20:23:17 IPv4 MTU set to 1500 on interface 20 using service
2022-04-28 20:23:17 INET6 address service: add fdda:d0d0:cafe:443::1001/128
2022-04-28 20:23:17 add_route_ipv6(fdda:d0d0:cafe:443::/64 ->
fdda:d0d0:cafe:443::1001 metric 0) dev OpenVPN TAP-Windows6
2022-04-28 20:23:17 IPv6 route addition via service succeeded
2022-04-28 20:23:17 IPv6 MTU set to 1500 on interface 20 using service
2022-04-28 20:23:17 Blocking outside dns using service succeeded.
2022-04-28 20:23:22 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
2022-04-28 20:23:22 C:\Windows\system32\route.exe ADD 69.4.234.134 MASK
255.255.255.255 192.168.1.1
2022-04-28 20:23:22 Route addition via service succeeded
2022-04-28 20:23:22 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0
10.5.0.1
2022-04-28 20:23:22 Route addition via service succeeded
2022-04-28 20:23:22 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0
10.5.0.1
2022-04-28 20:23:22 Route addition via service succeeded
2022-04-28 20:23:22 WARNING: this configuration may cache passwords in memory
-- use the auth-nocache option to prevent this
2022-04-28 20:23:22 Initialization Sequence Completed
2022-04-28 20:23:22 MANAGEMENT:
>STATE:1651321402,CONNECTED,SUCCESS,10.5.0.3,69.4.234.134,443,192.168.10.93,50072,fdda:d0d0:cafe:443::1001
It appears that the option, pull-filter ignore route-ipv6, fails to prevent
IPv6 routes from being added based on the following lines in the connection log:
add_route_ipv6(fdda:d0d0:cafe:443::/64 -> fdda:d0d0:cafe:443::1001 metric 0)
dev OpenVPN TAP-Windows6
IPv6 route addition via service succeeded
IPv6 MTU set to 1500 on interface 20 using service
It seems that the tip provided by Jordan Hayes does prevent IPv6 routes from
being added.
Best regards.
Stella
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
