Dan Lenski

> My ideal would be for the usual local domain server to be tried first, and only if that failed to try the internal one. Assuming "usual local domain server"...

> @dlenski Any further plans to include hostify into vpn-slice? I think it would be a great addition. The code for [my working `bash` version](https://github.com/dlenski/vpn-slice/issues/15#issuecomment-491466026) is above. If you want...

On Linux, OpenConnect doesn't _just_ call `ip route replace`. It also… - Calls a whole bunch of other `ip` commands which require capabilities (e.g. `ip route del`, `ip addr add`,...

> It would be really cool if this script could reconfigure routing after it's been set up by a different vpn solution. I imagine this would involve inspecting the current...

> When authenticating to Cisco ASA it responds with the following section in xml: > ``` > > > > ``` I have never seen this XML before. Can you...

Thanks for the log. This is quite strange. Basically, the split domains are appearing as part of the `` blob in the _authentication_ response… ``` ``` They are _not_, however,...

> > They are not, however, appearing in the X-CSTP-Split-DNS headers from the connection response, which is where we have always expected them to appear. It's not 100% clear that...

> Here's what [the documentation](https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/116016-technote-AnyConnect-00.html#anc1) says: Interesting. > Maybe the issue should be raised in https://github.com/systemd/systemd to request a feature to be used by VPN clients so that they can...

> @dlenski could you help me out with a first step? How do I get the XML passed on from openconnect to my custom script? As I wrote above, I...

I know very little about WSL, and Microsoft's habit of [trumpeting Linux compatibility features, botching them, not documenting them, and wasting incredible amounts of time spent by POSIX developers trying...