Public bug reported:
When a tun-based VPN is using the subnet topology, the communication
between clients can confuse the routing code that will wrongly emit ICMP
redirects. This problem is very well described here
http://backreference.org/2010/05/02/controlling-client-to-client-
connections-in-openvpn/. The same link also provides the workaround
(disable ICMP redirect on the TUN device).
This problem affects Lucid to Precise (Hardy's version does not support
the subnet mode).
ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: openvpn 2.1.3-2ubuntu3
ProcVersionSignature: Ubuntu 2.6.38-13.53-generic 2.6.38.8
Uname: Linux 2.6.38-13-generic x86_64
Architecture: amd64
Date: Thu Dec 22 11:34:08 2011
ProcEnviron:
LANGUAGE=en_US:en
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: openvpn
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: openvpn (Ubuntu)
Importance: Undecided
Assignee: Simon Déziel (sdeziel)
Status: New
** Tags: amd64 apport-bug natty
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openvpn in Ubuntu.
https://bugs.launchpad.net/bugs/907828
Title:
tun-based VPNs using the "subnet" topology are wrongly sending ICMP
redirects
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/907828/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
