Skip to Content [alt-c]
In reply to Hardening OpenVPN for DEF CON
Hi Andrew!
First thanks for this excellent article. I was playing around with your hook script and then I've noticed that nothing really happens. Having a look at your script I've seen this one:
/sbin/ip route show dev $dev table main | while read route
In my client conf I have:
# Add extra client protection script-security 2 setenv OPENVPN_ROUTE_TABLE 94 route-noexec route-up /usr/local/bin/route route 0.0.0.0 0.0.0.0
The connection is being successfully established, however the tun0 device has no ip routes at all, so in that case
will cause nothing to happen.
Any ideas?
Cheers, Victor
Reply
Your comment will be public. To contact me privately, email me. Please keep your comment polite, on-topic, and comprehensible. Your comment may be held for moderation before being published.
Your Name: (Optional; will be published)
Your Email Address: (Optional; will not be published)
Your Website: (Optional; will be published)
>
monospaced
Post a Reply
Your comment will be public. To contact me privately, email me. Please keep your comment polite, on-topic, and comprehensible. Your comment may be held for moderation before being published.