When built with USE=ipv6, the multihome feature of openvpn 2.1 doesn't work properly. Reproducible: Always Steps to Reproduce: 1. configure a system with multiple IP addresses on an interface 2. run openvpn using the multihome option ("--multihome" on the command line or "multihome" in the config file) 3. configure an openvpn client on a separate system to connect to the IP address that is not the 'first' address on the interface (in my setup most clients are 2.0.9, but I don't think that client version matters) Actual Results: When the client initiates a connection, you'll see the return packets have the wrong source IP address. Also, the server-side openvpn will log these error messages: read UDPv4 [CMSG=8|EHOSTUNREACH]: No route to host (code=113) Expected Results: Source address of udp packets should match the address the client originally connected to. When I build with USE=-ipv6, it works properly. [ Found these USE variables for net-misc/openvpn-2.1_rc4-r2 ] U I - - examples : Install example source code + + iproute2 : Enabled iproute2 support instead of net-tools - - ipv6 : Adds support for IP version 6 - - minimal : Install a very minimal build (disables, for example, plugins, fonts, most drivers, non-critical features) + + pam : Adds support PAM (Pluggable Authentication Modules) - DANGEROUS to arbitrarily flip - - passwordsave : Enables openvpn to save passwords - - selinux : !!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur + + ssl : Adds support for Secure Socket Layer connections - - static : !!do not set this during bootstrap!! Causes binaries to be statically linked instead of dynamically - - threads : Adds threads support for various packages. Usually pthreads - - userland_BSD : <unknown>
Have you reported this to upstream?
Please report to upstream, if you have some kind of patch/solution I will be happy to apply.
