Opened 9 years ago
Last modified 16 months ago
#552 new Feature Wish
check that ip forwarding is enabled
| Reported by: | Gert Döring | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | release 2.7 |
| Component: | Networking | Version: | OpenVPN git master branch (Community Ed) |
| Severity: | Not set (select this one, unless your'e a OpenVPN developer) | Keywords: | |
| Cc: | Gert Döring |
Description
11:24 [sjms(~sander@…)] when adding IPv6 to a linux box VPN server, do not forget to enable IPv6 forwarding.....
11:29 [msg(sjms)] hrhr, maybe we should add a sysctl check to see whether forwarding is actually on :)
(on Linux, FreeBSD, windows?)
no idea on whether this is doable with small effort, reasonable, etc...
Change History (5)
comment:1 Changed 7 years ago by
| Milestone: | release 2.4 → release 2.5 |
|---|
comment:2 follow-up: 3 Changed 4 years ago by
comment:3 Changed 4 years ago by
Replying to tincantech:
Is this not the same idea as auto-enabling NAT for a server which is expecting clients to redirect their gateway for internet access ?
This is not how I understand this ticket. This seems more to be to check that IP forwarding is enabled or not. This can usually be done using some sysctl command line calls. But we should investigate if we can do this more clever using some programatic approaches to detect if IP forwarding has been enabled or not. And we could then issue a warning in the log files that this is not configured correctly on the system.
comment:4 Changed 4 years ago by
| Milestone: | release 2.5 → release 2.6 |
|---|
This is still something "nice to have" for a server, but won't hit 2.5 -> bumping to 2.6
comment:5 Changed 16 months ago by
| Milestone: | release 2.6 → release 2.7 |
|---|
2.6 is close, and nobody has written code for it yet, so bumping to 2.7
Is this not the same idea as auto-enabling NAT for a server which is expecting clients to redirect their gateway for internet access ?
eg:
--server-nat x yWhich was shot down in flames when I proposed it ..