Commit Graph
13 Commits
Author SHA1 Message Date
Henry N 96e2420ad0 arch-Linux: Remove defaults
use-syslog is default, directory /etc/unbound is default, port 53 is default
2020-04-04 21:55:40 +02:00
Henry N 3cc3715b0e arch: username unbound default
"username: unbound" is default. Found in arch linu xdefauls unbound.conf and https://www.nlnetlabs.nl/documentation/unbound/unbound.conf/#username
2020-04-04 21:20:02 +02:00
Henry N f15c88c0aa Text unbound.conf.d/openvpn.conf 2020-04-02 21:03:46 +02:00
Henry N e5f169ad3b Remove intermediate echo 2020-04-01 23:58:37 +02:00
Henry N 6e21a54081 Full path to remove include openvpn.conf
Full path to remove include of /etc/unbound/unbound.conf.d/openvpn.conf,
and missing ":" after the "include".
2020-04-01 23:53:36 +02:00
Henry N d744222674 DNS Rebinding fix for all OS 2020-04-01 23:35:36 +02:00
Henry N d31dad466a harden-glue: and qname-minimisation for all OS
harden-glue: yes and qname-minimisation: yes for all OS, not only for Arch.
2020-04-01 23:25:27 +02:00
Henry N 148cbf93a9 one unbound config for all OS
Fix for #602
Create new config as /etc/unbound/unbound.conf.d/openvpn.conf,
include this into /etc/unbound/unbound.conf.
On uninstall simple remove the include, if if was injected by openvpn-install.
2020-04-01 00:57:56 +02:00
Henry N 44105eb060 Fix systemd unit issue on Debian 9 (#585)
On Debian 9 the copy of unit file `/etc/systemd/system/openvpn@.service` has no effect, see #583.
Same problem as #129 and #378, unit can not start on OpenVZ.

It must execute `systemctl enable` before `systemctl restart`.
So the new link to `/etc/systemd/system/openvpn@.service` was created before `systemctl restart`.

Fix https://github.com/angristan/openvpn-install/issues/583
2020-03-28 15:41:37 +01:00
Henry N 3d075c8708 Print warning about empty public interface (#581)
Warning, if cannot detect public interface, and give user a choice to continue or abord.
2020-03-26 21:27:16 +01:00
Henry N 23e533431a Fix error messag mkdir /etc/iptables (#580)
Fix this error message:
mkdir: cannot create directory ‘/etc/iptables’: File exists
2020-03-26 21:24:50 +01:00
Henry N 130659b003 Add explicit-exit-notify for UDP (#579)
For faster reconnects with UDP is better to send the the explicit-exit-notify to server. With this the server can directly see, that the client will exit.
2020-03-26 21:24:20 +01:00
Henry N aab5e7b2ff Fix getting pulic interface in IPv6 only (#578)
In a IPv6 only environment, the variable $NIC would be empty and iptables in add-openvpn-rules.sh will fail by missing argument.
2020-03-26 21:22:22 +01:00