ccd pushable options ?

Pippin

Hello,

In the 2.3 manual, https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage , it say`s:

--client-config-dir dir - Specify a directory dir for custom client config files.
..........
The following options are legal in a client-specific context:
--push
--push-reset
--iroute network [netmask]
--ifconfig-push local remote-netmask [alias]
--config [file]

I also found in the manual

--comp-lzo [mode]
--disable
--max-routes-per-client [n]

to be legal options. Would be good if they where added to --client-config-dir description.

If i look at --push "option" then it says this:

--push option Push a config file option back to the client for remote execution. Note that option must be enclosed in double quotes (""). The client must specify --pull in its config file. The set of options which can be pushed is limited by both feasibility and security.
..........
This is a partial list of options which can currently be pushed: --route, --route-gateway, --route-delay, --redirect-gateway, --ip-win32, --dhcp-option, --inactive, --ping, --ping-exit, --ping-restart, --setenv, --persist-key, --persist-tun, --echo, --comp-lzo, --socket-flags, --sndbuf, --rcvbuf

Does this mean that in a client-specific context all these push options are also allowed ?

Thanks,
Pippin

Traffic

The manual is .. hmm .. inaccurate .. :mrgreen:

I can tell you that --setenv is not pushable, you must use --setenv-safe if you want to push an environment variable to a client ..

Which calls this into question .. :lol:

Pippin

That kind of s****, especially for me as a "beginner" that tries to get an overview of possibilities so i can start to draw and write down the config because i will move my NAS/OVPN-server to a remote location and because of that the need for specific requirement's arise.
Add to that the internet full of old and wrong info adding to the confusion.
And then taking the next level up, routing and iptables, I wonder, my brain cells can still cope with that on my age? :lol:

But hey, it`s fun (-:

Thanks,
Pippin

Pippin

Hello again,

When using push in a client-specific context, does the client need to have pull in it`s config?
Can`t seem to find that......

Thanks,
Pippin

Traffic

At least --client or --pull must be specified to pull options.

Pippin

Was not sure when using ccd, thank you.

Pippin