Openvpn on 20.04

[Karl Auer]

On Sun, 2021-08-15 at 03:42 +0000, J.Witvliet at mindef.nl wrote:
> Best bet random rfc1918?
> I dare to disagree. You still have the (remote) chance, that the same
> address is used in server-side and client-side.
> Happened to our organization once.

For goodness' sake, does nobody read what is actually written?

"Best bet" does not mean no conflict, it just means the least chance of
it. Most people do not choose anything genuinely randomly, so if you
choose a genuinely random RFC1918 range for your network, you are
likely (but not certain) to avoid all those non-random ones commonly
chosen by other people.

I also specifically suggested IPv6 (and public IPv4 address space) as
solutions that at least in theory do offer guaranteed uniqueness.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer

GPG fingerprint: 61A0 99A9 8823 3A75 871E 5D90 BADB B237 260C 9C58
Old fingerprint: 2561 E9EC D868 E73C 8AF1 49CF EE50 4B1D CCA1 5170