-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

Sent with ProtonMail secure email.
------- Original Message -------
On Saturday, April 30th, 2022 at 13:47, Stella Ashburne <rewe...@gmx.com> wrote:


> Hi
>
> Thanks for your tip.
>
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA256
> >
> > Hi,
> >
> > Sent with ProtonMail secure email.
> > ------- Original Message -------
> > On Friday, April 29th, 2022 at 16:52, Stella Ashburne rewe...@gmx.com wrote:
> >
> > <snip>
> >
> > > Any tips as to how I can configure my client-side config file to prevent 
> > > IPv6 routes from being added during the connections?
> >
> > You could try --pull-filter-ignore 'route-ipv6 '
> > It could break everything though ..
> >
> > See the docs for details.
> >
> > tct
>
>
>
> Below is the connection log when I included the following option
>
> pull-filter ignore route-ipv6
>
> in my client configuration file.
>
>
>
> 2022-04-28 20:23:17 Successful ARP Flush on interface [20] 
> {FB1A746D-116A-471A-A0B3-6017A1BF137A}
> 2022-04-28 20:23:17 MANAGEMENT: 
> >STATE:1651321397,ASSIGN_IP,,10.5.0.3,,,,,fdda:d0d0:cafe:443::1001
>
> 2022-04-28 20:23:17 IPv4 MTU set to 1500 on interface 20 using service
> 2022-04-28 20:23:17 INET6 address service: add fdda:d0d0:cafe:443::1001/128
> 2022-04-28 20:23:17 add_route_ipv6(fdda:d0d0:cafe:443::/64 -> 
> fdda:d0d0:cafe:443::1001 metric 0) dev OpenVPN TAP-Windows6
>
> 2022-04-28 20:23:17 IPv6 route addition via service succeeded
> 2022-04-28 20:23:17 IPv6 MTU set to 1500 on interface 20 using service
> 2022-04-28 20:23:17 Blocking outside dns using service succeeded.
> 2022-04-28 20:23:22 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
> 2022-04-28 20:23:22 C:\Windows\system32\route.exe ADD 69.4.234.134 MASK 
> 255.255.255.255 192.168.1.1
> 2022-04-28 20:23:22 Route addition via service succeeded
> 2022-04-28 20:23:22 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 
> 10.5.0.1
> 2022-04-28 20:23:22 Route addition via service succeeded
> 2022-04-28 20:23:22 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 
> 128.0.0.0 10.5.0.1
> 2022-04-28 20:23:22 Route addition via service succeeded
> 2022-04-28 20:23:22 WARNING: this configuration may cache passwords in memory 
> -- use the auth-nocache option to prevent this
> 2022-04-28 20:23:22 Initialization Sequence Completed
> 2022-04-28 20:23:22 MANAGEMENT: 
> >STATE:1651321402,CONNECTED,SUCCESS,10.5.0.3,69.4.234.134,443,192.168.10.93,50072,fdda:d0d0:cafe:443::1001
>
>
>
> It appears that the option, pull-filter ignore route-ipv6, fails to prevent 
> IPv6 routes from being added based on the following lines in the connection 
> log:
>
> add_route_ipv6(fdda:d0d0:cafe:443::/64 -> fdda:d0d0:cafe:443::1001 metric 0) 
> dev OpenVPN TAP-Windows6
>
> IPv6 route addition via service succeeded
> IPv6 MTU set to 1500 on interface 20 using service
>

If you don't read the docs then don't expect it to work ..


> It seems that the tip provided by Jordan Hayes does prevent IPv6 routes from 
> being added.
>
> Best regards.
>
> Stella
>
>
>
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAGBQJibULtACEJEE+XnPZrkLidFiEECbw9RGejjXJ5xVVVT5ec
9muQuJ3jRwf+NnTMrIAkm0NKTLBukx+Kz/qACrk1wueOqEFYdeGMIgNz1nQg
vHqSHaukwBjtKQ47gpck91nKRPWZJIcnHPifaLcN1bCFwDFj3Wm12RHW8rb6
PT2XJCQljz6VfCyIVpQYLbqh7L0WKX3P2452EAYftI5NSfk0efIAT8nXrIfj
JfbSrJ1A7pPLJLOzV7Do+LfrXAKiAS75DsyPEqowys83shZ2sjdDiZd/ncM0
M41zYelh6rn61RrfY8GwzeR0dZAZrVYhNnDB0AIgI0D+k6ahOAKn1LbBAe8s
/ksUCVjLqggmwT6LbpA5UuXU1orV+2wgedZw7HeCCtUYHW3HNUBZXA==
=xcjo
-----END PGP SIGNATURE-----

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to