Hello I would like to start openvpn client without a route to the server (just a DNS route) and have openvpn dynamically create the route via scripts (in order to prevent any leak). [list] - I could add the route just before starting the client but the vpn server changes address often so there is no guarantee that the route I am adding before is the route that openvpn will use - I have tried using "--up" scripts but it seems that "--up" scripts are executed after the connection to the server. Without route, the connection fails. - I have tried using "--ipchange" scripts but it seems that "--ipchange" scripts are also executed only after a successful connection to the server when the ip changes. [/list] Is there any alternative solution? Thanks in advance for any help or suggestion. Thanks sergiogiogio

use: [quote]--client-connect Executed in --mode server mode immediately after client authentication.[/quote] and [quote]--client-disconnect Executed in --mode server mode on client instance shutdown.[/quote]

How to dynamically add the route to the server?

sergiogiogio

Hello

I would like to start openvpn client without a route to the server (just a DNS route) and have openvpn dynamically create the route via scripts (in order to prevent any leak).

- I could add the route just before starting the client but the vpn server changes address often so there is no guarantee that the route I am adding before is the route that openvpn will use

- I have tried using "--up" scripts but it seems that "--up" scripts are executed after the connection to the server. Without route, the connection fails.

- I have tried using "--ipchange" scripts but it seems that "--ipchange" scripts are also executed only after a successful connection to the server when the ip changes.

Is there any alternative solution? Thanks in advance for any help or suggestion.

Thanks
sergiogiogio

xauen

use:

--client-connect
Executed in --mode server mode immediately after client authentication.

and

--client-disconnect
Executed in --mode server mode on client instance shutdown.