# How can I disable the redirect-gateway def1 behavior on a Pritunl VPN server that splits a single route 0.0.0.0/0 into two /1 routes (0.0.0.0/1 and 128.0.0.0/1)?

**URL:** <https://forum.pritunl.com/t/how-can-i-disable-the-redirect-gateway-def1-behavior-on-a-pritunl-vpn-server-that-splits-a-single-route-0-0-0-0-0-into-two-1-routes-0-0-0-0-1-and-128-0-0-0-1/3573>\
**Category:** Pritunl VPN\
**Created:** [October 7, 2025, 8:06pm UTC](https://forum.pritunl.com/t/how-can-i-disable-the-redirect-gateway-def1-behavior-on-a-pritunl-vpn-server-that-splits-a-single-route-0-0-0-0-0-into-two-1-routes-0-0-0-0-1-and-128-0-0-0-1/3573 "2025-10-07T20:06:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Frogushka](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/f/f17d59/32.png) [@Frogushka](https://forum.pritunl.com/u/Frogushka)\
**Post date:** [October 7, 2025, 8:06pm UTC](https://forum.pritunl.com/t/how-can-i-disable-the-redirect-gateway-def1-behavior-on-a-pritunl-vpn-server-that-splits-a-single-route-0-0-0-0-0-into-two-1-routes-0-0-0-0-1-and-128-0-0-0-1/3573/1 "2025-10-07T20:06:16Z")

</div>

By default, when I add the route `0.0.0.0/0` in Pritunl’s server settings, the OpenVPN clients receive two routes instead of one. I want the server to push a **single** `0.0.0.0/0` route to clients, not the `redirect-gateway def1` style split routes.

Is there a way to disable or override this behavior in Pritunl configuration (either in the web UI or via advanced options)?

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [October 8, 2025, 5:01pm UTC](https://forum.pritunl.com/t/how-can-i-disable-the-redirect-gateway-def1-behavior-on-a-pritunl-vpn-server-that-splits-a-single-route-0-0-0-0-0-into-two-1-routes-0-0-0-0-1-and-128-0-0-0-1/3573/2 "2025-10-08T17:01:20Z")

</div>

There isn’t any option to do that. I do have some unfinished code that will allow using `push "redirect-gateway def1 block-local"`. If you are trying to block local network access that is the option that should be used. This would be done in `/usr/lib/pritunl/usr/lib/python3.9/site-packages/pritunl/clients/clients.py`

---

<div class="post-metadata">

**Author:** ![Frogushka](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/f/f17d59/32.png) [@Frogushka](https://forum.pritunl.com/u/Frogushka)\
**Post date:** [October 8, 2025, 5:52pm UTC](https://forum.pritunl.com/t/how-can-i-disable-the-redirect-gateway-def1-behavior-on-a-pritunl-vpn-server-that-splits-a-single-route-0-0-0-0-0-into-two-1-routes-0-0-0-0-1-and-128-0-0-0-1/3573/3 "2025-10-08T17:52:02Z")

</div>

Thank you for the quick and detailed reply!  
It would be great if you could add this feature to the server settings — this is an important aspect of VPN functionality.  
I really appreciate your work on Pritunl, it’s an excellent project!  
\<3

---

<div class="post-metadata">

**Author:** ![Frogushka](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/f/f17d59/32.png) [@Frogushka](https://forum.pritunl.com/u/Frogushka)\
**Post date:** [October 9, 2025, 10:44am UTC](https://forum.pritunl.com/t/how-can-i-disable-the-redirect-gateway-def1-behavior-on-a-pritunl-vpn-server-that-splits-a-single-route-0-0-0-0-0-into-two-1-routes-0-0-0-0-1-and-128-0-0-0-1/3573/4 "2025-10-09T10:44:32Z")

</div>

```auto
        if self.server.is_route_all():
            client_conf += 'push "route 0.0.0.0 0.0.0.0"\n'

```

Everything is working great! Thanks!

---

<div class="post-metadata">

**Author:** ![jaredc](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/j/dec6dc/32.png) [@jaredc](https://forum.pritunl.com/u/jaredc)\
**Post date:** [October 19, 2025, 10:01am UTC](https://forum.pritunl.com/t/how-can-i-disable-the-redirect-gateway-def1-behavior-on-a-pritunl-vpn-server-that-splits-a-single-route-0-0-0-0-0-into-two-1-routes-0-0-0-0-1-and-128-0-0-0-1/3573/5 "2025-10-19T10:01:48Z")

</div>

May I ask the use case for this?

I assumed the split routes was to help guarantee that the pritunl connection was the more specific (smaller) default routes so the OS would select that over your physical connections default route without having to try detect and remove the default route on different OS’s , network interfaces etc

Not saying you should not do it, just interested in when this would be useful out of curiosity
