sfoutrel
Hello,
I am using openvpn 2.3.4 from Debian Jessie.
I recently had some users complaining they can't connect anymore.
I found created files named after their common names with an incorrect configuration in each file.
the files contains a ifconfig-push line with ip and netmask related to a /31 config but the server is configured to use a /26 subnet topology.
Is there a way to block clients to push those configs ?
or prevent the server from generating those files that are incorrect according to the server config ?
Thanks for your help.
TinCanTech
Openvpn does not create --client-config-dir files for you.
Either you created them or some other 3rd party did.
sfoutrel
Can it be "pushed" by clients ?
No one is connecting to these servers to create them.
I forgot to mention that we use openvpn-radiusplugin
sfoutrel
Answer to myself, after some research it may be related to overwriteccfiles=false from the openvpn-radiusplugin
Pippin
That seems to be the case on a Synology NAS too.
Since overwriteccfiles=false, I would think that Radius will write a client specific file (like ccd) to remember that clients tunnel IP. Have you tried overwriteccfiles=true? It would not create these files in that case.
What directory are these files being stored?
