Re: [Openvpn-devel] [PATCH applied] Re: Force 'def1' method when --redirect-gateway is done through service

2016-12-01 Thread Gert Doering
Hi, On Thu, Dec 01, 2016 at 11:19:56AM -0500, Selva Nair wrote: > Did I overlook something? Sounds too complex to me :-) - "just use def1" is good. > Not that I like it. Wonder how android does it. Well, there's a VPN API - you tell the API "these networks is what I want to connect to" and then

Re: [Openvpn-devel] [PATCH applied] Re: Force 'def1' method when --redirect-gateway is done through service

2016-12-01 Thread Selva Nair
Hi, On Thu, Dec 1, 2016 at 3:07 AM, Gert Doering wrote: > On Wed, Nov 30, 2016 at 11:06:02PM +0100, Arne Schwabe wrote: > > Slight correction. We actually set 0.0.0.0/0 on Android but Android > > *always* translates that into a 0.0.0.0/1 and a 128.0.0.0/1 rule. > > > > We could do the same and d

Re: [Openvpn-devel] [PATCH applied] Re: Force 'def1' method when --redirect-gateway is done through service

2016-12-01 Thread Gert Doering
Hi, On Wed, Nov 30, 2016 at 11:06:02PM +0100, Arne Schwabe wrote: > Slight correction. We actually set 0.0.0.0/0 on Android but Android > *always* translates that into a 0.0.0.0/1 and a 128.0.0.0/1 rule. > > We could do the same and do the translation in the interactive service > instead of OpenV

Re: [Openvpn-devel] [PATCH applied] Re: Force 'def1' method when --redirect-gateway is done through service

2016-11-30 Thread Selva Nair
On Wed, Nov 30, 2016 at 5:06 PM, Arne Schwabe wrote: > > > > The patch does what we agreed on in the trac ticket ("no user changes" > > for the normal case, and "in the service pipe change, imply def1 if > > no flags set"). This is very little extra code and easily checked, > > while fixing this

Re: [Openvpn-devel] [PATCH applied] Re: Force 'def1' method when --redirect-gateway is done through service

2016-11-30 Thread Arne Schwabe
Am 30.11.16 um 19:58 schrieb Gert Doering: > ACK, thanks. > > The patch does what we agreed on in the trac ticket ("no user changes" > for the normal case, and "in the service pipe change, imply def1 if > no flags set"). This is very little extra code and easily checked, > while fixing this in ot