kylemanna / docker-openvpn

🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA
https://hub.docker.com/r/kylemanna/openvpn/
MIT License
8.62k stars 2.37k forks source link

Not masking IPv6 #730

Open wsxws opened 1 year ago

wsxws commented 1 year ago

Hi all, the server does not mask the real IPv6 address. when i add the following 2 lines to the server.conf:

server-ipv6 fd00::1:0/112 push "redirect-gateway def1 ipv6 bypass-dhcp"

the server does not start with following fatal error shown in log:

/sbin/ip -6 addr add fd00::1:1/112 dev tun0 openvpn | RTNETLINK answers: Permission denied

how to fix that issue ?

(deleting 'redirect-gateway def1' on client side and adding 'push "redirect-gateway def1 ipv6 bypass-dhcp"' at server side leads to have no decetable IPv6 on the outside, but this is not the way this should be handled)

SOLVED the container does not support ipv6 unless ist startet with ' network_mode: host' after adding iptables on the host as service my own and editing openvpn.conf and ovpn_env.sh everything runs fine now