Hi, On Tue, Feb 09, 2016 at 11:55:44AM +0100, Jan Just Keijser wrote: > > Could you test and report whether --learn-address does the job for you? > > a 'learn-address' script is an entirely different beast than a > 'client-connect' script: you cannot write out new openvpn directives in > a 'learn-address' script. In both a 'client-connect' script (not a CCD > file) and in a 'learn-address' script you can add routes to the system > routing table provided that you're not running with "user nobody" - it's > just that you cannot use the "normal" openvpn stuff for this.
The main difference (in relevance to this thread) is that --learn-address will *tell* the script what routes might be required for a specific client, while --client-connect would have to do some sort of database lookup... Or are iroutes exported? Manpage doesn't mention anything in that regard. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
signature.asc
Description: PGP signature