Hi, On Tue, Dec 15, 2015 at 3:54 PM, Gert Doering <g...@greenie.muc.de> wrote:
> Hi, > > On Tue, Dec 15, 2015 at 12:25:23PM -0500, Selva Nair wrote: > > > 2. release/2.3 (and upcoming 2.3.9) > > - May be built for target = winxp > > (this is the default target in openvpn-build if release/2.3 source is > > used) > > - Support for --block-outside-dns determined automatically at run-time: > > when run on vista and above the option will be supported > > when run on winxp the option will be ignored or cause > > a fatal error depending on how it is specified: > > if pushed from a server: just a warning in the logs > > specified in the config: fatal error unless protected by > > ignore-unknown-option or setenv-opt or forward-compatible... > > Make that "setenv opt block-outside-dns". ignore-unknown-option will > *not* help here, as it is not "unknown", but just "not working". > You are right, ignore-unknown .. would have worked with valdikSS patch, but not any more as its handled right away at msglevel_fc. Which is a bit disconcerting as on non-windows platforms ignore-unknown-option will make it non-FATAL but not on XP. My original comment about this to an early version of valdikSS' patch was on a different level -- if the user want DNS blocked, failure to block should be FATAL. But not respecting ignore-unknown-option only on some platforms doesn't look right. Selva
