localhost routing issue with new OpenVPN install

[Fabian Peters]

Am 14.07.2007 um 10:56 schrieb paul:

> Fabian Peters schrieb:
>> Hi all,
>> I'm facing a strange issue here, after having decommissioned an old
>> OpenVPN setup and replaced it with a new one. The old one was at home
>> in the 10.100.100.x range, the new one is in 10.10.10.x. My machine
>> (running OS X 10.4.10) is placed in a small LAN using 10.0.0.x, with
>> its primary IP being 10.0.0.6 and the router placed at 10.0.0.1.
>> While OpenVPN is not running, everything's fine. "netstat -rn" shows:
>> Destination Gateway            Flags   Refs   Use  Netif   Expire
>> default     10.0.0.1           UGSc      40     8    en0
>> 10/24       link#4             UCS        3     0    en0
>> 10.0.0.1    XX:XX:XX:XX:X:X    UHLW      38    33    en0   1154
>> 10.0.0.6    127.0.0.1          UHS        0     0    lo0
>> 10.0.0.7    XX:XX:XX:XX:X:X    UHLW       1  5001    en0    507
>> 10.0.0.255  ff:ff:ff:ff:ff:ff  UHLWb      0     3    en0
>> 127         127.0.0.1          UCS        0     0    lo0
>> 127.0.0.1   127.0.0.1          UH        10  5865    lo0
>> 169.254     link#7             UC         0     0    fw0
>> Internet6:
>> Destination     Gateway            Flags      Netif Expire
>> ::1             link#1             UHL         lo0
>> fe80::%lo0/64   fe80::1%lo0        Uc          lo0
>> fe80::1%lo0     link#1             UHL         lo0
>> fe80::%en1/64   link#5             UC          en1
>> ff01::/32       ::1                U           lo0
>> ff02::/32       ::1                UC          lo0
>> ff02::/32       link#5             UC          en1
>> On connecting, OpenVPN issues the following commands:
>> ifconfig tun0 10.10.10.10 127.0.0.1 mtu 1500 netmask  
>> 255.255.255.255 up
>> route add -net 10.10.10.0 127.0.0.1 255.255.255.0
>> Which look fine to me and do succeed. "netstat -rn" then shows:
> Why is the gateway for your VPN route (presumably the VPN server)  
> 127.0.0.1? I'm assuming you're the VPN client so the route command  
> should be something like:
> route add -net 10.10.10.0 <IP of VPN server> 255.255.255.0

This is the way it should be for openvpn, AFAIK. A netstat -rn on a  
FreeBSD client on the same VPN shows the same line, except for the  
"c" flag (RTF_PRCLONING):

10.10.10/24        127.0.0.1          UGS         0  1005872   tun1

I don't think the "c" flag causes my problem, but I might be  
mistaken...?

cheers

Fabian