Page 1 of 1

bypass-dhcp and bypass-dns

Posted: Fri Dec 19, 2014 8:28 pm
by Ingber
We have OVPN v2.3.6 on our Thninkpad Windows 8.1.1 x64 Pro laptops. When on travel and are using local networks, we'd like to be sure that we are always using OVPN without bypassing it, e.g., when conecting to a hotel lobby, etc.

In openvpn.8.html I see 2 options that might bypass OVPN for local networks:
bypass-dhcp
bypass-dns
Is this correct?

When I type (in Cygwin)
c:/Program Files/OpenVPN/bin/openvpn.exe --version
I get a list of compiled options (see below) that comes with the downloaded setup file. I do not see any bypass- options listed. Does this mean we're OK to not bypass local networks, or do we have to put in some special options in our .ovpn file, e.g., under
client
dev tun
proto udp
...

Thanks.

enable_crypto=yes
enable_crypto_ofb_cfb=yes
enable_debug=no
enable_def_auth=yes
enable_dlopen=unknown
enable_dlopen_self=unknown
enable_dlopen_self_static=unknown
enable_fast_install=needless
enable_fragment=yes
enable_http_proxy=yes
enable_iproute2=no
enable_libtool_lock=yes
enable_lzo=yes
enable_lzo_stub=no
enable_management=yes
enable_multi=yes
enable_multihome=yes
enable_pam_dlopen=no
enable_password_save=yes
enable_pedantic=no
enable_pf=yes
enable_pkcs11=yes
enable_plugin_auth_pam=no
enable_plugin_down_root=no
enable_plugins=yes
enable_port_share=yes
enable_selinux=no
enable_server=yes
enable_shared=yes
enable_shared_with_static_runtimes=yes
enable_small=no
enable_snappy=no
enable_socks=yes
enable_ssl=yes
enable_static=yes
enable_strict=no
enable_strict_options=no
enable_systemd=no
enable_win32_dll=yes
enable_x509_alt_username=no
with_crypto_library=openssl
with_gnu_ld=yes
with_mem_check=no
with_plugindir='$(libdir)/openvpn/plugins'
with_special_build=
with_sysroot=no

Re: bypass-dhcp and bypass-dns

Posted: Sat Dec 20, 2014 2:24 pm
by Traffic
--redirect-gateway flags...

flag: bypass-dhcp -- Add a direct route to the DHCP server (if it is non-local) which bypasses the tunnel

flag: bypass-dns -- Add a direct route to the DNS server(s) (if they are non-local) which bypasses the tunnel

IE: This data will not be encrypted and not be sent over the tunnel ..