[Pkg-utopia-maintainers] Bug#869590: network-manager does not set routes correctly after opening OpenVPN connection

[Chris Pryor]

Package: network-manager
Version: 1.8.2-1
Severity: normal

Dear Maintainer,

I am experiencing a problem with establishing OpenVPN connections with Network
Manager, where the routing table is not set up correctly after the VPN tunnel
has been established. In previous stable version (Debian 8) this only occured
when using the KDE desktop but on upgrade to Debian version 9 it has started
happening when using Gnome 3 also - which still persists on update to testing.
Problem also exist on two other systems currently still on Debian 8 (KDE only),
and across two VPN providers.

Example of incorrect routing table:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         dsldevice.lan   0.0.0.0         UG    100    0        0 eth0
10.8.8.0        0.0.0.0         255.255.255.0   U     50     0        0 tun0
5a.42.caa1.ip4. dsldevice.lan   255.255.255.255 UGH   100    0        0 eth0
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     100    0        0 eth0
dsldevice.lan   0.0.0.0         255.255.255.255 UH    100    0        0 eth0

Note default route is eth0, should be tun0. Manual alteration of routing table
is a viable work-around for the problem. Data leakage and efficacy of work-
around confirmed using wireshark.

Yours Sincerely,
Chris Pryor



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.11.0-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager depends on:
ii  adduser                3.115
ii  dbus                   1.10.20-1
ii  init-system-helpers    1.48
ii  libaudit1              1:2.7.7-1+b2
ii  libbluetooth3          5.45-1
ii  libc6                  2.24-12
ii  libcurl3-gnutls        7.52.1-5
ii  libglib2.0-0           2.52.3-1
ii  libgnutls30            3.5.14-2
ii  libjansson4            2.9-1
ii  libmm-glib0            1.6.8-1
ii  libndp0                1.6-1+b1
ii  libnewt0.52            0.52.20-1+b1
ii  libnl-3-200            3.2.27-2
ii  libnm0                 1.8.2-1
ii  libpam-systemd         234-1
ii  libpolkit-agent-1-0    0.105-18
ii  libpolkit-gobject-1-0  0.105-18
ii  libpsl5                0.17.0-5
ii  libreadline7           7.0-3
ii  libselinux1            2.6-3+b2
ii  libsystemd0            234-1
ii  libteamdctl0           1.26-1+b1
ii  libudev1               234-1
ii  libuuid1               2.29.2-2
ii  lsb-base               9.20161125
ii  policykit-1            0.105-18
ii  udev                   234-1
ii  wpasupplicant          2:2.4-1

Versions of packages network-manager recommends:
ii  crda             3.18-1
ii  dnsmasq-base     2.77-2
ii  iptables         1.6.1-2
ii  iputils-arping   3:20161105-1
ii  isc-dhcp-client  4.3.5-3
ii  modemmanager     1.6.8-1
ii  ppp              2.4.7-1+4

Versions of packages network-manager suggests:
pn  libteam-utils  <none>

-- no debconf information