Re: OpenVPN + Tor

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

------- Original Message -------
On Monday, November 6th, 2023 at 12:26, Jason Long <[email protected]> wrote:

<s>

> 
> Hello,
> Thank you so much for your reply.
> Some lines of my server.conf file are:
> 
> push "redirect-gateway def1 bypass-dhcp"
> push "dhcp-option DNS 172.20.1.2"
> push "dhcp-option DNS 172.20.1.7"
> topology subnet
> 
> 
> Should I add the following line in my client configuration file:
> 
> redirect-gateway def1 bypass-dns
> 
> And add the following line to my server configuration file:
> 
> pull-filter ignore 'redirect-gateway*'
> 
> 
> Right?

No, 
--pull-filter is a client option, so is used by the client.

However, because you are pushing DNS servers from the server,
I will assume that 172.20.1.0/24 is a subnet on the server 
side of the VPN; In which case you need to read the Howto
section which explains "Expanding the scope of the VPN ":

https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet

You do not need to use "redirect-gateway" or "pull-filter"
on the client side at all.

-- 

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAnBYJlSOjyCZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAACXoAf/dw5/HO5VILQ8WVdKqsJl+9qEqIz9Ly1ykUQIEyy8Dt0Y/FmH
+pp9uyyMN9HroHCvmtxi0gEr2/WE43qte8T2OQ62XmgZKhYRG1HQ31by/pdP
5xZhKJlbZt16ZA2Hqlub8GnDYdZLUTE1LLPJqOrh3Ocr6KSL7z4vXKRE6ziw
zvmC44yk/t658irxC9+aG8HHDAVMLfwc7RBIWqxjZyCze4o07zVqf3ZdPBJ2
XOkN79hWdRgxZrnA6wTgPqz3s6PxJqJ5HpRYpoXyFQdig25O6wuBqskAGN/T
JQkfl5UdQ6aQzFuqTJl51rtoxL+kWVR5Z97hQ8Un8KRJi7ICBK0eTw==
=1bvO
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=/Dea
-----END PGP PUBLIC KEY BLOCK-----