>> Also route-pull works in both OpenVPN 2.x and 3.x
>> clients while pull-filter is currently 2.x only.
> 
> Actually pull-filter cannot be compared with route-nopull as the
> former is customizable. The real question is whether there is any
> compelling reason to use it other than lack of alternatives in 2.3 and
> older. I didn't know 3.x does not support pull-filter. Why? It's easy
> to code (at least I know that for sure) so that can't be the reason.

The compelling reason for route-nopull is that it will catch all route
related options even if OpenVPN adds a new one in a future version. It
is a simple way of saying I don't want my routes to be modified.


To emulate pull-filter with pull-filter you need to block this list:

redirect-private
redirect-gateway
block-ipv6
client-nat
route
route-ipv6
route-gateway
route-metric
ip-win32
dhcp-option
dhcp-renew
register-dns
tap-sleep
block-outside-dns

but not block

route-gateway
route-dealy

And without looking at the source code you will be hard pressed to come
up with the same list.

Arne

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to