CentOS - Dec 2015 - openvpn + routing

Helmut Drodofsky wrote:
> Hello,
>
> there is one route missing:
>
> 128.0.0.0/1.
>
Did you mean 127.0.0.0?

      mark
> config client:
> route-nopull
> redirect-gateway def1 bypass-dhcp
>
> best regards
> Helmut
>
> Viele Gr??e
> Helmut Drodofsky
>
> Internet XS Service GmbH
> He?br?hlstra?e 15
> 70565 Stuttgart
>
> Gesch?ftsf?hrung
> Dr.-Ing. Roswitha Hahn-Drodofsky
> HRB 21091 Stuttgart
> USt.ID: DE190582774
> Tel. 0711 781941 0
> Fax: 0711 781941 79
> Mail: info at internet-xs.de
> www.internet-xs.de
>
> Am 06.12.2015 um 20:26 schrieb Axel Glienke:
>> Hello,
>>
>> i have a little question.
>>
>> My system:
>>
>> ip route:
>> 0.0.0.0/1 via 10.8.0.5 dev tun0
>> default via 192.168.2.1 dev br0  proto static  metric 425
>> 10.8.0.1 via 10.8.0.5 dev tun0
>> 10.8.0.5 dev tun0  proto kernel  scope link  src 10.8.0.6
>> 88.198.140.127 via 192.168.2.1 dev br0
>> 192.168.2.0/24 dev br0  proto kernel  scope link  src 192.168.2.101
>> metric 425
>> 192.168.122.0/24 dev virbr0  proto kernel  scope link  src
192.168.122.1
>>
>>
>> traceroute gmx.de
>> traceroute to gmx.de (213.165.65.60), 30 hops max, 60 byte packets
>>  1  Speedport.ip (192.168.2.1)  0.578 ms  0.662 ms  0.859 ms
>> ^C
>>
>> [root at h1 ~]# traceroute spiegel.de
>> traceroute to spiegel.de (62.138.116.3), 30 hops max, 60 byte packets
>>  1  10.8.0.1 (10.8.0.1)  35.009 ms  34.982 ms  34.956 ms
>>
>> Why the routing is different, in first case over br0 in second over
>> the vpn device?
>>
>>
>> How can i disable "push default route" from the
server-directive on
>> client-side in OpenVPN?
>> I want, that only traffic, incoming over tun0 routing back over tun0.
>> Is this possible with firewalld-cmd?
>>
>> Thx.
>>
>> Gr??e
>>
>> Axel
>>
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> https://lists.centos.org/mailman/listinfo/centos
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

On 12/7/2015 8:40 AM, m.roth at 5-cent.us wrote:
>> >there is one route missing:
>> >
>> >128.0.0.0/1.
>> >
> Did you mean 127.0.0.0?
and I hope not /1 or that would encompass all networks with the first 
octet from 128-255


-- 
john r pierce, recycling bits in santa cruz

default route normally is

0.0.0.0/0

to overwrite default you can
- erase the existing an add the new one: this change is to do vice 
versa: an start up and shut down; so you need an installation dependend 
information about the default Gateway.

Alternativly you can add two routes:
0.0.0.0 netmask 128.0.0.0 and
128.0.0.0 netmask 128.0.0.0

then you have routes, that overwrites the existing default. You have 
only to add this specific routes on openvpn up and delete on openvpn down.


-- 
Viele Gr??e
Helmut Drodofsky
  
Internet XS Service GmbH
He?br?hlstra?e 15
70565 Stuttgart
   Gesch?ftsf?hrung
Dr.-Ing. Roswitha Hahn-Drodofsky
HRB 21091 Stuttgart
USt.ID: DE190582774
Tel. 0711 781941 0
Fax: 0711 781941 79
Mail: info at internet-xs.de
www.internet-xs.de

Am 07.12.2015 um 18:29 schrieb John R Pierce:
> On 12/7/2015 8:40 AM, m.roth at 5-cent.us wrote:
>>> >there is one route missing:
>>> >
>>> >128.0.0.0/1.
>>> >
>> Did you mean 127.0.0.0?
>
> and I hope not /1 or that would encompass all networks with the first 
> octet from 128-255
>
>