Up/down relate to the state of the tun device.
It takes some time until you can send data through it.


From: "Leroy Tennison via Openvpn-users" 
<openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net>>
Date: Saturday, 11 November 2023 at 07:21:17
To: "Openvpn Users" 
<openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net>>
Subject: [Openvpn-users] Issue with "up" and "down" script

Below is the script I'm attempting to use (IP address obfuscated but is valid, 
domain search obfuscated - wouldn't be valid)

#!/bin/bash
/usr/bin/echo "Params dev $dev and script type $script_type" >> /tmp/vpn-dns
case "$script_type" in
  up)
        resolvectl dns $dev 10.10.10.1
        /usr/bin/echo "DNS result is $?" >> /tmp/vpn-dns
        resolvectl domain $dev cloud.example.com client. example.com rush. 
example.com example.com
        /usr/bin/echo "Domain result is $?" >> /tmp/vpn-dns
        ;;
  down)
        resolvectl dns $dev ""
        /usr/bin/echo "DNS result is $?" >> /tmp/vpn-dns
        resolvectl domain $dev ""
        /usr/bin/echo "Domain result is $?" >> /tmp/vpn-dns
        ;;
esac

Sometimes it works (can do dig lookups for internal names/IP addresses) and 
other times it doesn't.  In order to troubleshoot I added the output to the 
file in /tmp.  Now, when the DNS update is working, there's no file in /tmp.  
Any ideas why or suggestions?

Configuration file lines are:

up /etc/openvpn/adj-dns
down /etc/openvpn/adj-dns

The file itself is owned by root (root:root), permissions 755.  Connection is 
started/stopped by root via sudo.

Thanks for any insight.



Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet 
de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u 
verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat 
aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband 
houdt met risico's verbonden aan het elektronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are 
not the addressee or if this message was sent to you by mistake, you are 
requested to inform the sender and delete the message. The State accepts no 
liability for damage of any kind resulting from the risks inherent in the 
electronic transmission of messages.
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to