Prompted by #1060 - use of dhcp-option or dns in a --server config is quite likely an error, and the intent really is "push these settings toward the clients". So @ordex suggested to make OpenVPN error-out if such a scenario is encountered.
I would not go there (because it will break existing-if-wrong server configs on upgrade, and breaking VPN servers is especially bad) - but having a clear warning along the lines of
WARNING: --dns option discovered in server config. To propagate DNS information to clients, use "push dns..." instead
or maybe not.
Recording the discussion here so we can decide either way, and record the result.
Prompted by #1060 - use of
dhcp-optionordnsin a--serverconfig is quite likely an error, and the intent really is "push these settings toward the clients". So @ordex suggested to make OpenVPN error-out if such a scenario is encountered.I would not go there (because it will break existing-if-wrong server configs on upgrade, and breaking VPN servers is especially bad) - but having a clear warning along the lines of
or maybe not.
Recording the discussion here so we can decide either way, and record the result.