I'm trying to use pull-filter in an Android client to ignore a pushed redirect-gateway option from the server. When I open the connection, though, I still see the redirect-gateway being pulled from the server. I even see pull-filter in the list of UNUSED options. Is this a known issue, or am I just doing it wrong?
logs from the connection with verb 5
18:30:37.778 -- ----- OpenVPN Start -----
18:30:37.779 -- EVENT: CORE_THREAD_ACTIVE
18:30:37.783 -- Frame=512/2048/512 mssfix-ctrl=1250
18:30:37.784 -- UNUSED OPTIONS
4 [nobind]
5 [persist-key]
6 [persist-tun]
8 [auth-nocache]
14 [pull-filter] [ignore] [redirect-gateway]
18:30:37.784 -- EVENT: RESOLVE
18:30:37.792 -- Contacting nunya.business:1194 via UDP
18:30:37.793 -- EVENT: WAIT
18:30:37.796 -- Connecting to [nunya.business]:1194 (nunya.business) via UDPv4
18:30:37.891 -- EVENT: CONNECTING
18:30:37.893 -- Tunnel Options:V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client
18:30:37.894 -- Creds: UsernameEmpty/PasswordEmpty
18:30:37.895 -- Peer Info:
IV_GUI_VER=OC30Android
IV_VER=3.2
IV_PLAT=android
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_LZO=1
IV_LZO_SWAP=1
IV_LZ4=1
IV_LZ4v2=1
IV_COMP_STUB=1
IV_COMP_STUBv2=1
IV_AUTO_SESS=1
18:30:38.033 -- VERIFY OK : depth=1
cert. version : 3
...
basic constraints : CA=true
18:30:38.034 -- VERIFY OK : depth=0
cert. version : 3
...
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication
18:30:38.260 -- SSL Handshake: TLSv1.2/TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
18:30:38.261 -- Session is ACTIVE
18:30:38.261 -- EVENT: GET_CONFIG
18:30:38.266 -- Sending PUSH_REQUEST to server...
18:30:38.311 -- OPTIONS:
0 [route] [192.168.42.0] [255.255.255.0]
1 [redirect-gateway] [def1] [bypass-dhcp]
2 [explicit-exit-notify] [1]
3 [verb] [5]
4 [route-gateway] [192.168.67.1]
5 [topology] [subnet]
6 [ping] [10]
7 [ping-restart] [120]
8 [ifconfig] [192.168.67.2] [255.255.255.0]
9 [peer-id] [0]
10 [cipher] [AES-256-GCM]
18:30:38.312 -- PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: SHA256
compress: ANY
peer ID: 0
18:30:38.313 -- EVENT: ASSIGN_IP
18:30:38.316 -- Google DNS fallback enabled
18:30:38.429 -- Connected via tun
18:30:38.430 -- LZO-ASYM init swap=0 asym=1
18:30:38.430 -- Comp-stub init swap=0
18:30:38.430 -- EVENT: CONNECTED info='@nunya.business:1194 (nunya.business) via /UDPv4 on tun/192.168.67.2/ gw=[192.168.67.1/]' trans=TO_CONNECTED
18:30:40.048 -- EVENT: DISCONNECTED trans=TO_DISCONNECTED
18:30:40.051 -- EVENT: CORE_THREAD_INACTIVE
18:30:40.052 -- Tunnel bytes per CPU second: 0
18:30:40.052 -- ----- OpenVPN Stop -----
