Yes, but there're much groups out here, it's little painful to match all groups. If ocserv could add default-group config, that would be great :) On Mon, May 12, 2014 at 2:56 PM, Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote: > On Mon, May 12, 2014 at 7:08 AM, Steve <steve at thupdi.net> wrote: >> Yes, I know routes for group or user, but if I had routes in default >> config, user and group specified routes seems couldn't override but >> just append. >> For example, default route is 192.168.1.0/24 and user1 has route >> 0.0.0.0/0.0.0.0, could not let user1 got 'All traffic' mode. > > Indeed, but you can have no routes in the default config and move > routing information to group configuration. Some users will belong to > the all-route group and the others to the no-all-route group. > > regards, > Nikos