On Wednesday 06 May 2009 21:39:15 Jason Dixon wrote: > On Wed, May 06, 2009 at 08:48:06PM +0400, Vadim Zhukov wrote: > > On Wednesday 06 May 2009 19:20:43 Jason Dixon wrote: > > > So apparently OpenVPN is a douche of an application by > > > destroying/recreating any tun devices you ask it to bind to. This > > > causes havoc with pf/altq if you queue on those tun interfaces. > > > > > > I've asked on the openvpn-users mailing list if there's any way to > > > have OpenVPN avoid teardown of an existing tun(4) interface but > > > nobody had any useful answers (besides "use the up/down > > > scripts")... yeah, thanks. Has anyone here used OpenVPN in server > > > mode and overcome this? > > > > See "persist-tun" option. > > This only affects restarts, not the initial startup.
The idea is that you pre-create tun device (possibly in startup script, or in /etc/rc.local) and then OpenVPN uses it. -- Best wishes, Vadim Zhukov A: Because it messes up the way people read text. Q: Why is a top-posting such a bad thing?