Created attachment 1682 [details] Documentation describing the functionality of the option The “Additional configuration” checkbox under the “Miscellaneous options” of the “Advanced Settings” is missing for OpenVPN in CU197. This option allowed us to add additional custom configurations (directives) in both "client.conf.local" and "server.conf.local" files located under /var/ipfire/ovpn/scripts to configure/push them to the OpenVPN clients upon connection. This feature was released with Core 89. Since then, it has been working and is useful to add advanced configurations and push them to the clients (such as pushing multiple DNS or WINS Servers to the clients). After an upgrade took place from CU196 => CU197, both files ("client.conf.local" and "server.conf.local") are still available with their configurations (not sure for fresh installation), but the “Additional configuration” checkbox has disappeared from the GUI. This option was active during the upgrade process, but the directives are no longer pushed to the clients after the upgrade was done! Attaching a copy of the documentation showing the configuration description.
+1
Hello Jony, the documentation has already been updated a couple of weeks ago: > https://www.ipfire.org/docs/configuration/services/openvpn/advanced This feature should not have been there in the first place as there is no need to add anything custom like this. If there should be the need to support something that is currently not supported, it should be added to the UI.
Hello Michael, The feature was available in CU196 (and backwards). This feature will enable the ability to push multiple DNS servers to OVPN clients upon connection. Currently, no option in the UI allows pushing multiple DNS IPs globally. The "DNS" field under "DHCP Settings" won't allow you to add more than one IP address. According to your comment, this was intentionally removed in the CU197. Would you provide a way to add multiple DNS/WINS IPs globally to push them to the clients? (i.e., a global DNS configuration which will be pushed to each client without configuring them manually one by one!)
Jony, MODIFIED is not what you think it is: > https://www.ipfire.org/docs/devel/bugzilla/workflow And if you want to get my attention, just trying to "assign" a ticket to me to tell me what to do for you is not the way.
My purpose in changing the case status to "Modified" was not to draw your attention, Michael; it was to keep the discussion open and ensure that those on the "CC List" receive notification of the new comments. (As I have no idea if Bugzilla keeps sending notifications after a ticket has been closed.) I already knew that the documentation had been updated when I opened the ticket, which is why I've attached a copy of the old documentation describing the future, which was missing. And no, Michael, I'm not trying to tell you what to do for me! I'm trying to contribute to this project by discussing some ideas that might be helpful to others. That's why I had posted the question in the community first and got confirmation from Adolf that this was a bug before opening a ticket: https://community.ipfire.org/t/add-multiple-dns-in-openvpn-to-push-them-to-the-clients/15159/2 It's very confusing when each of the "Core Team Members" tells something; for you, it's an intentional change, but for Adolf, it's a bug! Perhaps a lack of communication!? (No clue how you handle those tasks and share info internally) Just to let you know, I've solved the issue on the first day I noticed it. This is one among 20+ documented issues that I commit (add/remove/change) to IPFire before it goes into the production environment. I found that this one can be helpful to others in general, which is why I posted it in the community. I'm not relying on you, Michael, but thanks for your contributions! We both know that IPFire is an open-source project that was forked from IPCop (another "dead" open-source project), and everyone can commit changes without relying on others. However, it's good to have a supporting community that contributes/shares knowledge and experiences, I think. I don't understand why you were offended by my action or comment. Feel free to close the ticket without offering a solution if you prefer!
(In reply to Jony from comment #5) > My purpose in changing the case status to "Modified" was not to draw your > attention, Michael; it was to keep the discussion open and ensure that those > on the "CC List" receive notification of the new comments. (As I have no > idea if Bugzilla keeps sending notifications after a ticket has been closed.) It does. > And no, Michael, I'm not trying to tell you what to do for me! > I'm trying to contribute to this project by discussing some ideas that might > be helpful to others. That's why I had posted the question in the community > first and got confirmation from Adolf that this was a bug before opening a > ticket: > > https://community.ipfire.org/t/add-multiple-dns-in-openvpn-to-push-them-to- > the-clients/15159/2 Contribution is great! Having this ticket is helpful. > It's very confusing when each of the "Core Team Members" tells something; > for you, it's an intentional change, but for Adolf, it's a bug! Perhaps a > lack of communication!? (No clue how you handle those tasks and share info > internally) Every bit of information about this is public. Sometimes we don't all agree on everything and we don't have to. > Just to let you know, I've solved the issue on the first day I noticed it. > This is one among 20+ documented issues that I commit (add/remove/change) to > IPFire before it goes into the production environment. I found that this one > can be helpful to others in general, which is why I posted it in the > community. I'm not relying on you, Michael, but thanks for your > contributions! > > We both know that IPFire is an open-source project that was forked from > IPCop (another "dead" open-source project), and everyone can commit changes > without relying on others. However, it's good to have a supporting community > that contributes/shares knowledge and experiences, I think. > > I don't understand why you were offended by my action or comment. Feel free > to close the ticket without offering a solution if you prefer! I am not offended by your action. I was just trying to keep everyone on the same page. A lot of communication with a lot of people is happening implicitly and when people wait for action they usually get disappointed. That is why we need to communicate is some kind of fashion that does not leave anyone behind. What other changes to you have to manually apply to your systems for it to work your way? I would be intrigued to know about them.
I have pushed support for multiple DNS and WINS servers here: > https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=103d3e4093f2a9e1244f632a3481f78535059ac4 > https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=5faf847eecfc81574d31cacd79ecb8ca55afd5fa This will be part of Core Update 199.