Tested this with various combinations of --port, --bind, --lport,
--local <v4|v6>, etc. - a fascinating world of interesting effects.
I've fixed a small oversight in the commit message - the line needs to
read
Summary: socket bind is now only done if one of these is set
- --lport <port> with <port> not "0"
(with "--lport", as "--port" never leads to an automatic bind)
Also added a reference to GH schwabe/ics-openvpn#1794 where half the
problems go away if "lport 0" is removed from the config - which, in
these cases, translates to "is not enabling --bind" (the real issue
is "any" bind AF vs. getaddrinfo(), but not binding at all helps).
Patch has been applied to the master branch.
commit c91948a0e03f0ad03e7fdde59ed9fce87ba00885
Author: Gert Doering
Date: Mon Mar 24 19:27:26 2025 +0100
Make 'lport 0' no longer sufficient to do '--bind'.
Signed-off-by: Gert Doering <g...@greenie.muc.de>
Acked-by: Arne Schwabe <arne-open...@rfc2549.org>
Message-Id: <20250324182735.12657-1-g...@greenie.muc.de>
URL:
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg31222.html
Signed-off-by: Gert Doering <g...@greenie.muc.de>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
