<![CDATA["Don't pull routes" and firewall rules]]>I'm not a very experienced pfSense or OpenVPN user, but I know enough to be dangerous.

I've followed a tutorial (https://forum.pfsense.org/index.php?topic=106305.0) to get PIA working on my pfSense (2.3) router and set up a firewall rule and alias so that only a few machines in my house are using the VPN while the rest use the regular gateway.

My problem is that if I don't check the "Don't pull routes" box in the OpenVPN config, every computer in the house goes through the VPN gateway rather than following the firewall rules I have set up.

But if I check that box, dnsleaktest.com shows my ISP, which I take to mean there's a leak. If the box is unchecked, I see Choopa, LLC, which is PIA I think.

Any ideas what I don't understand here?

]]>https://forum.netgate.com/topic/99483/don-t-pull-routes-and-firewall-rulesRSS for NodeMon, 16 Mar 2026 08:54:00 GMTFri, 06 May 2016 02:54:07 GMT60<![CDATA[Reply to "Don't pull routes" and firewall rules on Mon, 16 Oct 2017 23:09:54 GMT]]>That is because you already have that route in the routing table from your other connection.

#notabug

Diagnostics > Routes

]]>https://forum.netgate.com/post/728310https://forum.netgate.com/post/728310Mon, 16 Oct 2017 23:09:54 GMT<![CDATA[Reply to "Don't pull routes" and firewall rules on Mon, 16 Oct 2017 22:57:55 GMT]]>Heh, was just about to necrobump this thread.  :)

There's gotta be some routing bug here, but it's hard to narrow down or reproduce it.  I'm getting some FreeBSD routing errors in the OpenVPN logs…

Oct 16 18:49:33 	openvpn 	56370 	/sbin/route add -net 0.0.0.0 10.61.15.5 128.0.0.0
Oct 16 18:49:33 	openvpn 	56370 	ERROR: FreeBSD route add command failed: external program exited with error status: 1
]]>https://forum.netgate.com/post/728303https://forum.netgate.com/post/728303Mon, 16 Oct 2017 22:57:55 GMT<![CDATA[Reply to "Don't pull routes" and firewall rules on Mon, 16 Oct 2017 22:39:45 GMT]]>https://forum.pfsense.org/index.php?topic=138078.msg755873#msg755873

]]>https://forum.netgate.com/post/728295https://forum.netgate.com/post/728295Mon, 16 Oct 2017 22:39:45 GMT