I'm looking at option "--no-bind" for an auto generated Systemd units to be started: (Debian 11 Bullseye):
Code: Select all
# cat /usr/lib/systemd/system/openvpn-client@.service | grep ExecStart
ExecStart=/usr/sbin/openvpn --suppress-timestamps --nobind --config %i.conf
To bind or not to bind is declared in configuration file on admin choice. But for auto-generated Systemd's units with clients it's enforced at start by direct option specification.
What a reason? Except a risk to catch a port collision issue.