OpenVPN instances and pushed default routes

[Slydder]

hey all,

I have a problem here where I am connecting two opnsense sites (S2S) and the routes being pushed should only contain 2 subnets but is actually pushing 0.0.0.0/2 as well.

regardless of what I set on the server side I cant get rid of this and it is killing our net. I have since disable automatic routes with route-noexec on the client side but cannot find where to edit the route-up script. is that even possible in opnsense?

thx for any help,
chuck

[Slydder]

So there is no way to edit the config per hand to add a route-up script entry and there is no way to add a route-up entry in the gui which makes the route-noexec useless.

if the "not ipv4 (default)" on the server would just work as it says it should in the openvpn docs I would be happy. anyone have an idea?

[Slydder]

Current work around to stay online until a solution is available:

I added the following entry in /etc/crontab

*       *       *       *       *       root    ( sleep 5 ; /sbin/route del -net 0.0.0.0/2 10.52.0.1 )

and now regardless of what crap gets pushed I can keep the net online.