Connected to a VPN provider, in routing policy mode, block routed clients if tunnel goes down set to yes. Everything working properly.
All I have to do is switch to all traffic mode and click apply to reproduce the problem of LAN clients routed through tunnel being blocked even though the tunnel is indeed up.
As the tunnel goes down rules are put in place to prohibit the default route. However when the tunnel comes back up in all traffic mode that rule is not cleaned up because, as the log explicitly says, it's not in routing policy mode anymore.
Thanks, fixed with this commit. Additionally, now if you change between All and Policy routing while the tunnel is already down, the routing tables will also be properly updated with this commit.
I'm currently looking into making the tunnel enforcement also be applied at boot time.
Last edited: