[SOLVED] Too many routes problem

OndrejL

Hi

from last week OpenVpn doesn't work. I dont know why, maybe some Win updates (win 7).

When I start OpenVpn client and when I connect to server, it seems ok (green icon in task bar). But I can't ping anything. If I check route table, there is so many unexpected routes. and I have only too in my config. (see below). Can anybody help me

route remote_host 255.255.255.255 net_gateway
route 147.232.81.0 255.255.255.0 10.232.81.1 2
route 192.168.81.0 255.255.255.0 10.232.81.1 2

And it make 30 routes

0.34.244.232 255.255.255.255 192.168.1.1 192.168.1.100 21
0.34.245.24 255.255.255.255 192.168.1.1 192.168.1.100 21
0.34.245.80 255.255.255.255 192.168.1.1 192.168.1.100 21
0.34.251.236 255.255.255.255 192.168.1.1 192.168.1.100 21
0.34.252.0 255.255.255.255 192.168.1.1 192.168.1.100 21
0.64.0.142 255.255.255.255 192.168.1.1 192.168.1.100 21
0.64.166.220 255.255.255.255 192.168.1.1 192.168.1.100 21
0.64.205.172 255.255.255.255 192.168.1.1 192.168.1.100 21
0.64.214.115 255.255.255.255 192.168.1.1 192.168.1.100 21
0.65.18.83 255.255.255.255 192.168.1.1 192.168.1.100 21
0.65.28.242 255.255.255.255 192.168.1.1 192.168.1.100 21
0.68.150.168 255.255.255.255 192.168.1.1 192.168.1.100 21
0.69.253.239 255.255.255.255 192.168.1.1 192.168.1.100 21
0.69.254.81 255.255.255.255 192.168.1.1 192.168.1.100 21
0.71.53.69 255.255.255.255 192.168.1.1 192.168.1.100 21
0.71.84.96 255.255.255.255 192.168.1.1 192.168.1.100 21
0.72.218.248 255.255.255.255 192.168.1.1 192.168.1.100 21
1.139.128.188 255.255.255.255 192.168.1.1 192.168.1.100 21
1.139.129.204 255.255.255.255 192.168.1.1 192.168.1.100 21
1.139.141.120 255.255.255.255 192.168.1.1 192.168.1.100 21
2.68.175.128 255.255.255.255 192.168.1.1 192.168.1.100 21
2.68.236.96 255.255.255.255 192.168.1.1 192.168.1.100 21
2.109.11.32 255.255.255.255 192.168.1.1 192.168.1.100 21
2.114.32.92 255.255.255.255 192.168.1.1 192.168.1.100 21
2.120.30.112 255.255.255.255 192.168.1.1 192.168.1.100 21
2.120.30.116 255.255.255.255 192.168.1.1 192.168.1.100 21
2.120.31.140 255.255.255.255 192.168.1.1 192.168.1.100 21
2.120.31.144 255.255.255.255 192.168.1.1 192.168.1.100 21
6.216.13.238 255.255.255.255 192.168.1.1 192.168.1.100 21
10.232.81.0 255.255.255.0 On-link 10.232.81.8 286
10.232.81.8 255.255.255.255 On-link 10.232.81.8 286
10.232.81.255 255.255.255.255 On-link 10.232.81.8 286
34.0.0.3 255.255.255.255 192.168.1.1 192.168.1.100 21
9.148.156.222 255.255.255.255 192.168.1.1 192.168.1.100 21
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
7.255.255.255 255.255.255.255 On-link 127.0.0.1 306
147.232.81.29 255.255.255.255 192.168.1.1 192.168.1.100 21
192.168.1.0 255.255.255.0 On-link 192.168.1.100 276
192.168.1.100 255.255.255.255 On-link 192.168.1.100 276
192.168.1.255 255.255.255.255 On-link 192.168.1.100 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.100 276
224.0.0.0 240.0.0.0 On-link 10.232.81.8 286

dazo

I wonder if this is related to Trac ticket #64 ... it looks so for me.

https://community.openvpn.net/openvpn/ticket/64

That is about to be fixed and tested very soonish. But I cannot promise a new Windows build asap yet.

OndrejL

thank you, its works. Do you know why happening this? Because it was ok week ago, and then just stop.

dazo

It was a bug which got introduced in commit f9b2ada0eece06158cc3ce6f6348bd431dfd7f0a, iirc ... which enables DNS expansion of routes, where multiple records will result in more routes. The problem was that the route list was not initialised properly, so it actually contained rubbish data - which then got interpreted like these random routes.

This was fixed in thhe following commit, which got added to the 2.1.4 release.

commit c68e0cddf024ae5b18f89062bf7164da77f1cf06
Author: James Yonan <james@openvpn.net>
Date:   Sat Oct 23 22:32:00 2010 +0000

    Fixed initialization bug in route_list_add_default_gateway
    (Gert Doering).