Re: redirect-gateway block-local , network mask

Gert Doering <[email protected]> Mon, 29 Jul 2024 08:12:15 +0200
Newsgroups gmane.network.openvpn.user
Message-ID <[email protected]>
Hi,

On Mon, Jul 29, 2024 at 10:05:06AM +0400, Dmitry Melekhov wrote:
> I have 192.168.22.229/24 on my lan interface,
> 
> if I add
> 
> redirect-gateway  block-local
> 
> then openvpn adds route
> 
> 192.168.22.0    192.168.31.1    255.255.255.128 UG        0 0          0 tun0

There should be a second route for 192.168.22.128

> Could you tell me, why route is only for half of local net?

"more specific wins".  If OpenVPN were to install a /24 route, it might
not work (because on most operating system a directly connected network
will have precedence over a static route with the same netmask).

2x 255.255.255.128 = 1x 255.255.255.0

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc (application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE-----
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=hip+
-----END PGP SIGNATURE-----