References: <1538820128-27086-1-git-send-email-lstipakov@...277...>
 <1540904039-2129-1-git-send-email-lstipakov@...277...>
 <4864a5a9-7816-6347-9a82-1e2432321562@...2181...>
From: tincanteksup <tincanteksup@...277...>
Message-ID: <650e29b8-e009-ba88-8d2b-1117fceeba65@...277...>
Date: Fri, 26 Mar 2021 01:09:51 +0000
MIME-Version: 1.0
In-Reply-To: <4864a5a9-7816-6347-9a82-1e2432321562@...2181...>
Content-Language: en-GB
Subject: Re: [Openvpn-devel] [PATCH v4] Improve "recursive routing" warning
 message
List-Id: <openvpn-devel.lists.sourceforge.net>
List-Unsubscribe: <https://lists.sourceforge.net/lists/options/openvpn-devel>, 
 <mailto:openvpn-devel-request@lists.sourceforge.net?subject=unsubscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum_name=openvpn-devel>
List-Post: <mailto:openvpn-devel@lists.sourceforge.net>
List-Help: <mailto:openvpn-devel-request@lists.sourceforge.net?subject=help>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/openvpn-devel>, 
 <mailto:openvpn-devel-request@lists.sourceforge.net?subject=subscribe>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
To: openvpn-devel@lists.sourceforge.net

Hi,

On 25/03/2021 23:26, Antonio Quartulli wrote:
> Hi,
> 
> On 30/10/2018 13:53, Lev Stipakov wrote:
>> From: Lev Stipakov <lev@...515...>
>>
>> +
>> +        msg(D_LOW, "Recursive routing detected, drop packet %s. Fix your routing or consider using --allow-recursive-routing option.", BSTR(&addrs_buf));
> 
> I would add "if you know what you are doing", otherwisethe average Joe
> will think that he can just add "--allow-recursive-routing" to his
> config and the problem is fixed.
> 

"If you know what you are doing" is no help
because they all "_know what they are doing_" ...

My understanding is as follows:

Recursive-routing means that I send encrypted packets, which are
destined for the public IP of the peer address, over the tunnel.
Instead of over the internet (or other common network).

Considering the loops which the receiver will have to jump
though to accept these packets, I question the validity of
documenting this "feature" --allow-recursive-routing, at all.