How do I describe a script that replaces the 'route' program?

ogogon

Colleagues, tell me, please, how to correctly describe in the configurations of clients and servers a script that replaces the 'route' command?

I use OpenVPN on a router running FreeBSD and I support multiple routing tables (FIB, Forwarding Information Base). This means that all servers and clients running on the router must make routing entries not in one, but in several tables.

I understood from the description that it is possible to replace the standard route program with my alternative script. Unfortunately, I did not find specific details.

An attempt to add the line

iproute /usr/local/etc/openvpn/scripts/route.sh

to the config file resulted in an error.

Please tell me how can I solve my problem?

Thanks in advance for your reply,
ogogon.

Pippin

Take a look here:
https://build.openvpn.net/man/openvpn-2.5/openvpn.8.html
under:
"SCRIPTING INTEGRATION"

TinCanTech

A bit out-of-date: https://community.openvpn.net/openvpn/wiki/UnprivilegedUser

ogogon wrote resulted in an error

Oh that error .. you need to tie an onion to your belt ..

ogogon

TinCanTech wrote A bit out-of-date: https://community.openvpn.net/openvpn/wiki/UnprivilegedUser

Thank you for the link sent. She's very good, but she doesn't seem to be able to help me.

There, in the section "Config Changes", the line for the configuration file is directly given. Here is such:

iproute /usr/local/sbin/unpriv-ip

This is exactly the line I tried to use, as I wrote about in the first message.

In response, I get the following messages in /var/log/messages:

Dec 12 01:00:00 gw openvpn[33964]: Options error: Unrecognized option or missing or extra parameter(s) in /usr/local/etc/openvpn/ovpn_client.conf:65: iproute (2.5.2)
Dec 12 01:00:00 gw openvpn[33964]: Use --help for more information.
Dec 12 01:00:00 gw ogogon: ./openvpn: WARNING: failed to start openvpn

Perhaps this is due to the fact that, as I already wrote in the first message, I use the FreeBSD platform, and it does not have the route2 subsystem and, accordingly, the 'ip' command.

TinCanTech wrote Oh that error .. you need to tie an onion to your belt ..

The onion did not help anymore, what else are we going to tie? Hope the rabbi has more ideas?

ogogon.

TinCanTech

If you don't have iproute2 then how can you replace it ?

The use of option --iproute is specific.

ogogon

TinCanTech wrote If you don't have iproute2 then how can you replace it ?

I beg your pardon, but apparently, you still did not read my first message very carefully.

I really didn't have the slightest intention of replacing the 'ip' command from the route2 packet with my script. And precisely because it does not exist. I am glad that you now understand this.

I want to replace with my script the 'route' command, which is used for the same on BSD platforms.

Or did the developers not think about such an option?

ogogon.

TinCanTech

What you do not understand is what it is that Iproute2(ip) command is capable of and why it can be replaced.

Where-as, "replacing" the functionality of ifconfig and route has not been implemented.

Keep in mind, the developers are volunteers, also.

tunnel_boar

ogogon wrote
TinCanTech wrote If you don't have iproute2 then how can you replace it ?
I beg your pardon, but apparently, you still did not read my first message very carefully.

I really didn't have the slightest intention of replacing the 'ip' command from the route2 packet with my script. And precisely because it does not exist. I am glad that you now understand this.

I want to replace with my script the 'route' command, which is used for the same on BSD platforms.

Or did the developers not think about such an option?

ogogon.

On behalf of the OpenVPN team I would like to apologize for TinCan's slightly irritable behavior at times. He tries to help as many people as possible and can get tired.

TinCanTech

tunnel_boar wrote On behalf of the OpenVPN team

You have not proven who you are or why we should listen.

Would you care to offer an answer to the question of why iproute2 is required in order for it to be replaced ?

Or is your comment simply an opinion which you keep about me ? (In which case, your post would be Off-Topic)

tunnel_boar

I was just teasing before, relax.

But iproute2 is not required?

Am I missing something about the functionality of iproute2?

TinCanTech

Perhaps you are too familiar with Linux Open Source to realise that the same OpenVPN source has to also work with Windblows, which is closed source.