Comment 0 for bug 1476769

Revision history for this message
ellie (et1234567) wrote :

When activating an OpenVPN without DHCP6 through NetworkManager, random traffic will be routed without VPN if the basic physical network device has IPv6 connectivity but the VPN hasn't. This is a security issue, since a user activating the VPN would expect all go through it.

network-manager package version: 0.9.10.0-4ubuntu15.1

Steps to reproduce:
1. Find some VPN without IPv6 routing or DHCP6. Get the according openvpn configuration file and import into NetworkManager
2. Make sure your physical networking device has native IPv6 access
3. Activate the VPN in the network settings

Expected result:

 * IPv4 default route through VPN
 * IPv6 default route absent (as VPN doesn't provide any)

Actual result (as I understand the bug report):

 * IPv4 default route through VPN (good)
 * IPv6 default route via local gateway (bad)

ProblemType: Bug
DistroRelease: Ubuntu 15.04
Package: openvpn 2.3.2-9ubuntu4
ProcVersionSignature: Ubuntu 3.19.0-21.21-generic 3.19.8
Uname: Linux 3.19.0-21-generic x86_64
ApportVersion: 2.17.2-0ubuntu1.1
Architecture: amd64
CurrentDesktop: GNOME
Date: Tue Jul 21 19:21:50 2015
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: openvpn
UpgradeStatus: No upgrade log present (probably fresh install)