Re: [ext] OpenVPN 2.7_alpha3 released

Gert Doering <[email protected]> Wed, 6 Aug 2025 22:38:14 +0200

Newsgroups	gmane.network.openvpn.user
Message-ID	<[email protected]>

Hi,

On Wed, Aug 06, 2025 at 05:00:51PM +0200, Ralf Hildebrandt via Openvpn-users wrote:
> > * Improved Client support for DNS options
> >   * Client implementations for Linux/BSD, included with the default install
> 
> How do I actually use that?
> 
> I'm using ubuntu 25.04, and usually I'm using --up an --down scripts
> for that. So if there was an "easier" way, I'd sure like to see an example.

If you fully install 2.7_alpha3, you get a "dns-updown" script
in the "libexecdir" (like, /usr/local/libexec/openvpn/dns-updown).

If there is *no* --up script set, OpenVPN will call said script 
(in the compiled-in location) automatically and it should do all the
magic.

If --up is in use, we decided to not mess with people's pre-existing
configurations - in that case, the DNS script is not run and "everything
stays as it is".

If you have an --up script doing something else, and still want the new
DNS script, use "--dns-updown force" ("always run the compiled-in script"),
or if you want something else, use "--dns-updown /path/to/my/script.sh"
(this will need --script-security 2).

The --dns-updown section in the manpage explains more about the script
and the conditions when and how it's called, and how --dhcp-option DNS
and --dns interact ("do not break people's setup" leads to quite some
contortions at times - I hope we got it mostly right for DNS)

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

signature.asc (application/pgp-signature, 630 B)