I’ve got a question about the standard OpenVPN client shipped with the GL distribution. I’m debugging this on a Mango but I don’t think it’s just related to that product.
I have a USB LTE modem that I’m tethering to on eth1 (it’s one of the USB modems that shows up as an Ethernet). I have a connection to OpenVPN Cloud that should provide split-horizon routing - i.e. the push routes from the VPN server should go out over the tunnel and everything else should go via eth1.
The problem I have is trying to get the OpenVPN client on the Mango to honour config settings. Right now, the client is installing the 0.0.0.0/1 route in the kernel route table with a metric of 0. That’s an issue because the OpenVPN cloud has to exit to the Internet - instant blackholing of traffic.
If I manually delete 0.0.0.0/1 from the CLI, everything springs to life. I tried to add “route-nopull” to the config but the client doesn’t appear to honour it. Nor any other type of route filtering instructions.
So, some questions
- Does the OpenVPN client support push filtering? If not, is there a list of what it does support? I’ve tried some of my usual config options but I always end up with a full push of routes, including 0.0.0.0/1
- If it doesn’t support push filtering, what’s the best way to fix this? I don’t have a lot of control over the server options here.