client can change the IP

boreal

Hello,

The server I'm running is OpenVPN version 2.2.1 on Debian Wheezy. The clients are tunnelblick 3.6.4a running on OS X 10.11.

I'm using CCD files to specify the IP address the client gets set to. I noticed that the client can update the IP by simply using ifconfig. Is there a way to prevent this?

Thanks!

boreal

After further testing it seems the server will not route packets after the client has updated the interface manually.