From 37724c47bb365e44896e20e3f20ee1975aeb531f Mon Sep 17 00:00:00 2001 From: Kali Kaneko Date: Thu, 6 Sep 2018 12:59:26 +0200 Subject: pull filter ignore ipv6 --- src/leap/bitmask/vpn/helpers/linux/bitmask-root | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/leap/bitmask/vpn/helpers/linux/bitmask-root b/src/leap/bitmask/vpn/helpers/linux/bitmask-root index c76100af..8f9deb54 100755 --- a/src/leap/bitmask/vpn/helpers/linux/bitmask-root +++ b/src/leap/bitmask/vpn/helpers/linux/bitmask-root @@ -124,6 +124,8 @@ FIXED_FLAGS = [ "--user", "nobody", "--persist-key", "--persist-local-ip", + "--pull-filter", "ignore", "ifconfig_ipv6", + "--pull-filter", "ignore", "route_ipv6" ] if OPENVPN_GROUP is not None: @@ -567,6 +569,8 @@ def ip6tables(*args, **options): def toggle_ipv6(status='disable'): + # XXX this has to be called after openvpn has been launched, + # otherwise openvpn fails on ip -6 addr step if status == 'disable': arg = 1 elif status == 'enable': -- cgit v1.2.3