Re: [Openvpn-devel] OpenVPN 2.5-rc1 released unable to redirect IPv4 default gateway under Windows

[Gert Doering]

Hi,

On Mon, Oct 19, 2020 at 07:59:06PM +0200, Thomas Schäfer wrote:
> > I expect us to release a RC3 this week, so it can be thoroughly tested.
> 
> I went back to the university tonight just in the moment I saw rc3.
> 
> No wonder: I can confirm it works now as expected.
> 
> Tested with the windows installer package (amd) and with linux source tar 
> ball.

thank you very much! :-)

*happy dance*

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
 Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany g...@greenie.muc.de


signature.asc
Description: PGP signature
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] OpenVPN 2.5-rc1 released unable to redirect IPv4 default gateway under Windows

[Thomas Schäfer]

Am Sonntag, 4. Oktober 2020, 18:08:13 CEST schrieben Sie:
> Hi Thomas,
> 
> On Tue, Sep 22, 2020 at 04:21:49PM +0200, Thomas Schäfer wrote:
> > I get
> > Note: unable to redirect IPv4 default gateway -- Cannot read current
> > default gateway from system
> I'm fairly sure I found this, and a fix has been merged today.
> 
> I expect us to release a RC3 this week, so it can be thoroughly tested.


I went back to the university tonight just in the moment I saw rc3.

No wonder: I can confirm it works now as expected.

Tested with the windows installer package (amd) and with linux source tar 
ball.

Thank you!

Thomas







___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] OpenVPN 2.5-rc1 released unable to redirect IPv4 default gateway under Windows

[Gert Doering]

Hi Thomas,

On Tue, Sep 22, 2020 at 04:21:49PM +0200, Thomas Schäfer wrote:
> I get 
> Note: unable to redirect IPv4 default gateway -- Cannot read current default 
> gateway from system

I'm fairly sure I found this, and a fix has been merged today.

I expect us to release a RC3 this week, so it can be thoroughly tested.

(You saw the same effect before, but it was a different bug this time...
I've already increased my testing coverage on one of the build machines
now to actually test redirecting v4/v6 gateway, over v4/v6 connections,
and will add one more test machine that has no default route, with the
same test cases - so, hopefully, preventing this from ever happening
again)

thanks for testing & reporting.

gert


-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
 Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany g...@greenie.muc.de


signature.asc
Description: PGP signature
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] OpenVPN 2.5-rc1 released unable to redirect IPv4 default gateway under Windows

[Gert Doering]

Hi,

On Tue, Sep 22, 2020 at 04:21:49PM +0200, Thomas Schäfer wrote:
> Am Dienstag, 22. September 2020, 11:10:44 CEST schrieb Samuli Seppänen:
> > The OpenVPN community project team is proud to release OpenVPN
> > 2.5-rc1. Source code and Windows installers can be downloaded from our
> > download page:
> 
> I get 
> Note: unable to redirect IPv4 default gateway -- Cannot read current default 
> gateway from system

Just to be sure: did this work in 2.4.x?  Or did this never work?

Did you try "redirect-gateway ipv6" or "redirect-gateway def1 ipv6"?

> Environment:
> 
> Windows client: IPv6-only Wifi

"redirect-gateway" for IPv4 has two (at least) modes

 - default mode: 
 find out where the current default route points to
 remove that route
 install a /32 route (if IPv4) for the VPN server to the old gateway
 install a new route 0.0.0.0/0 -> tap interface

 - "def1" mode
 find out where the current default route points to
 *keep* that route
 install a /32 route (if IPv4) for the VPN server to the old gateway
 install two new /1 routes 0.0.0.0/1 + 128.0.0.0/1 -> tap interface


Not sure how stupid our assumptions are here, but possibly "if finding
out the current default route" fails, it might be that we do not proceed
further at all...

As a workaround,

  route 0.0.0.0 128.0.0.0
  route 128.0.0.0 128.0.0.0

should do the same thing as "redirect-gateway def1" but without the
current gateway check (= will only work if you connect over IPv6).


Thanks for the test results anyway, this is a bug and needs to be fixed
- it probably is not a *new* bug, and might not be fixed in 2.5.0, but
it will be.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
 Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany g...@greenie.muc.de


signature.asc
Description: PGP signature
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] OpenVPN 2.5-rc1 released unable to redirect IPv4 default gateway under Windows

[Thomas Schäfer]

Am Dienstag, 22. September 2020, 11:10:44 CEST schrieb Samuli Seppänen:
> The OpenVPN community project team is proud to release OpenVPN
> 2.5-rc1. Source code and Windows installers can be downloaded from our
> download page:
> 
> 

Please report bugs and ask development questions here:

  
Developer mailing list


I tested the todays windows release candidate (as client)  against my home 
servers. 

I get 
Note: unable to redirect IPv4 default gateway -- Cannot read current default 
gateway from system

Environment:

Windows client: IPv6-only Wifi

Linux/Synology  server: behind DS-lite

transport IPv6, works, payload IPv6 works, payload IPv4 works only partly

Redirection of IPv6 works, redirection of IPv4 doesn't work

Regards,
Thomas


ovpn25.rc1-log.tar.xz
Description: application/xz-compressed-tar
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel