|
|
In message <47A31284.6090200@xxxxxxxxx>, Jan Just Keijser <janjust@xxxxxxxxx> wrote: > Now imagine what happens if you add a route to send traffic for host > 195.10.10.10 also through this same tunnel: > 1. SRC=10.8.0.6, DST=195.10.10.10 > 2. packets is sent to tun0, openvpn on the client encapsulates > 3. packet is now sent to 195.10.10.10. Wait. How do I send stuff to > 195.10.10.10? Ow right, I must send it to the tun0 interface. Go to step > 2. > > so you've created a 'tunneling loop' for lack of a better word. > > the only way round this is to separate the vpn server from the database > application server. They only need separate IP addresses, they can run on the same machine. -- OpenPGP key fingerprint: D0A6 F403 9745 CED4 6B3B 94CC 8D74 8FC9 9F7F CFE4 ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |