Package: openvpn
Version: 2.3.2-9
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Maintainer,

I was connecting through a VPN and realized that some website recognized
my VPN IP address, while some displayed my real IP.

The output of 'ip route' displayed my default gateway as my router,
instead of my VPN endpoint.

I have re-run openvpn and, in the output, I can see the following
command/entry:

Mon Sep  1 22:33:19 2014 /sbin/ip route add 0.0.0.0/1 via 10.4.0.5

But when I inspect ip route there is no record of it (removed my
endpoint IP)

root@Chuck:/home/claudio# ip ro
default via 192.168.1.1 dev wlan0  proto static  metric 1024 
10.4.0.1 via 10.4.0.5 dev tun0  proto static  metric 20 
10.4.0.5 dev tun0  proto kernel  scope link  src 10.4.0.6 
128.0.0.0/1 via 10.4.0.5 dev tun0  proto static  metric 20 
169.254.0.0/16 dev wlan0  scope link  metric 1000 
XXX.XXX.XXX.XXX via 192.168.1.1 dev wlan0 
192.168.1.0/24 dev wlan0  proto kernel  scope link  src 192.168.1.16


If I manually run 
/sbin/ip route add 0.0.0.0/1 via 10.4.0.5

then everything works fine.

All the other entries are present.
This are the last entries of the log (removed my MAC address); this did
not work even before I added bypass-dhcp to my VPN server config, so
it's safe to assume that's not the issue.

Mon Sep  1 22:33:19 2014 PUSH: Received control message:
'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS
8.8.8.8,route 10.4.0.1,topology net30,ping 10,ping-restart 120,ifconfig
10.4.0.6 10.4.0.5'
Mon Sep  1 22:33:19 2014 OPTIONS IMPORT: timers and/or timeouts modified
Mon Sep  1 22:33:19 2014 OPTIONS IMPORT: --ifconfig/up options modified
Mon Sep  1 22:33:19 2014 OPTIONS IMPORT: route options modified
Mon Sep  1 22:33:19 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option
options modified
Mon Sep  1 22:33:19 2014 ROUTE_GATEWAY 192.168.1.1/255.255.255.0
IFACE=wlan0 HWADDR=XX:XX:XX:XX:XX:XX
Mon Sep  1 22:33:19 2014 TUN/TAP device tun0 opened
Mon Sep  1 22:33:19 2014 TUN/TAP TX queue length set to 100
Mon Sep  1 22:33:19 2014 do_ifconfig, tt->ipv6=0,
tt->did_ifconfig_ipv6_setup=0
Mon Sep  1 22:33:19 2014 /sbin/ip link set dev tun0 up mtu 1500
Mon Sep  1 22:33:19 2014 /sbin/ip addr add dev tun0 local 10.4.0.6 peer
10.4.0.5
Mon Sep  1 22:33:19 2014 /sbin/ip route add 178.63.125.170/32 via
192.168.1.1
Mon Sep  1 22:33:19 2014 /sbin/ip route add 0.0.0.0/1 via 10.4.0.5
Mon Sep  1 22:33:19 2014 /sbin/ip route add 128.0.0.0/1 via 10.4.0.5
Mon Sep  1 22:33:19 2014 /sbin/ip route add 10.4.0.1/32 via 10.4.0.5
Mon Sep  1 22:33:19 2014 Initialization Sequence Completed


Let me know if there's any additional information I can provide.

- -- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (1001, 'unstable'), (600, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openvpn depends on:
ii  debconf [debconf-2.0]  1.5.53
ii  initscripts            2.88dsf-53.4
ii  iproute2               3.16.0-1
ii  libc6                  2.19-10
ii  liblzo2-2              2.08-1
ii  libpam0g               1.1.8-3.1
ii  libpkcs11-helper1      1.11-1
ii  libssl1.0.0            1.0.1i-2

Versions of packages openvpn recommends:
ii  easy-rsa  2.2.2-1

Versions of packages openvpn suggests:
ii  openssl     1.0.1i-2
pn  resolvconf  <none>

- -- Configuration Files:
/etc/default/openvpn changed:
AUTOSTART="none"
OPTARGS=""
OMIT_SENDSIGS=0


- -- debconf information:
  openvpn/create_tun: false

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlQE6VAACgkQZ0Gi6TDJB+cmfACgk/LVgDSb0kskgQQ8n1IqJ3cl
6+wAnA3wklpE5e6/CsAIBssjmWxHDEYT
=jLHZ
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to