brendan i have been using my vpn tunnel recently, and have had great sucess connecting and using my network from remote locations. i have noticed that when i stop the connection, the settings put into /etc/resolv.conf by dhclient do not get reverted. while this isnt a failure of OpenVPN, i wanted to get input on how to best deal with this situation. i have a TAP config setup, and use ISC DHCP for address assignment. the client connects, uses route-delay and the gateway is extracted from the dhcp assignment. my dhcp server sets the name servers, the domain and the search order for the client. when the connection is stopped, i send explicit-exit-notify 2. after the connection is down, the client still has my dhcp assigned settings in /etc/resolv.conf for name severs, domain and search order. many network functions are impacted by the inability to resolve names on the remote network the client is on. i have to run something like "sudo ifup <interface>" to get the /etc/resolv.conf settings back from the remote network. because the interface that is being used can be different, wired vs. wifi, i am looking to find a solution that easily incorporates or accounts for that nuance. what are people doing to restore the clients configs after a vpn connection is torn down?
Traffic In your client config you need to specify the following:script-security 2 up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf
brendan my distro (fedora 20) has: /usr/share/doc/openvpn/contrib/pull-resolv-conf/client.down /usr/share/doc/openvpn/contrib/pull-resolv-conf/client.up i guess these are similar to what you indicate? they seem to do the work with the resolv.conf files.
