Hi,

On Tue, Feb 09, 2016 at 11:55:44AM +0100, Jan Just Keijser wrote:
> > Could you test and report whether --learn-address does the job for you?
>
> a 'learn-address' script is an entirely different beast than a 
> 'client-connect' script: you cannot write out new openvpn directives in 
> a 'learn-address' script. In both a 'client-connect' script (not a CCD 
> file) and in a 'learn-address' script you can add routes to the system 
> routing table provided that you're not running with "user nobody" - it's 
> just that you cannot use the "normal" openvpn stuff for this.

The main difference (in relevance to this thread) is that --learn-address 
will *tell* the script what routes might be required for a specific client,
while --client-connect would have to do some sort of database lookup...

Or are iroutes exported?  Manpage doesn't mention anything in that regard.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: signature.asc
Description: PGP signature

Reply via email to