I finally was able to bisect this a little bit. In addition to the original report, I tested with the following versions:
-rw-r--r-- 1 root root 421744 2010-04-10 13:29 openvpn_2.1.0-2_i386.deb -rw-r--r-- 1 root root 403716 2008-09-17 20:02 openvpn_2.1~rc11-1_i386.deb -rw-r--r-- 1 root root 406384 2010-01-12 17:49 openvpn_2.1~rc15-1_i386.deb -rw-r--r-- 1 root root 407718 2010-01-12 17:48 openvpn_2.1~rc19-2_i386.deb -rw-r--r-- 1 root root 416610 2010-01-12 17:43 openvpn_2.1~rc20-2_i386.deb a398857f910e203fd7f02d4061889c4d openvpn_2.1.0-2_i386.deb 742788fdd1b5b944ab297aa23139d621 openvpn_2.1~rc11-1_i386.deb 8941d4b581a57bd6312c9b90195a48c6 openvpn_2.1~rc15-1_i386.deb 82e977bf527ba7861855277786d5f132 openvpn_2.1~rc19-2_i386.deb 49171ddda7fbf602c912217a510813a2 openvpn_2.1~rc20-2_i386.deb The problem does not exist on rc11, rc15 and rc19. Upgrading to rc20 or anything more recent causes UDP replies to clients to go out via the default gateway interface, no matter where the incoming connection came from. I am not changing anything on the system, apart from a dpkg -i openvpn-xxx to switch the server version in use. Looking at the changelog of rc20 I do not see anything that could make it behave differently from rc19, but the problematic behavior is sadly totally reproducible. Cheers. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org