Re: [Openvpn-users] Issue with "up" and "down" script

[<J.W...@mi...>]

Up/down relate to the state of the tun device.
It takes some time until you can send data through it.


From: "Leroy Tennison via Openvpn-users" <ope...@li...<mailto:ope...@li...>>
Date: Saturday, 11 November 2023 at 07:21:17
To: "Openvpn Users" <ope...@li...<mailto:ope...@li...>>
Subject: [Openvpn-users] Issue with "up" and "down" script

Below is the script I'm attempting to use (IP address obfuscated but is valid, domain search obfuscated - wouldn't be valid)

#!/bin/bash
/usr/bin/echo "Params dev $dev and script type $script_type" >> /tmp/vpn-dns
case "$script_type" in
  up)
        resolvectl dns $dev 10.10.10.1
        /usr/bin/echo "DNS result is $?" >> /tmp/vpn-dns
        resolvectl domain $dev cloud.example.com client. example.com rush. example.com example.com
        /usr/bin/echo "Domain result is $?" >> /tmp/vpn-dns
        ;;
  down)
        resolvectl dns $dev ""
        /usr/bin/echo "DNS result is $?" >> /tmp/vpn-dns
        resolvectl domain $dev ""
        /usr/bin/echo "Domain result is $?" >> /tmp/vpn-dns
        ;;
esac

Sometimes it works (can do dig lookups for internal names/IP addresses) and other times it doesn't.  In order to troubleshoot I added the output to the file in /tmp.  Now, when the DNS update is working, there's no file in /tmp.  Any ideas why or suggestions?

Configuration file lines are:

up /etc/openvpn/adj-dns
down /etc/openvpn/adj-dns

The file itself is owned by root (root:root), permissions 755.  Connection is started/stopped by root via sudo.

Thanks for any insight.



Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.