topic Re: linux /etc/iproute2/rt_tables filled with 231 pangp.include and 232 pangp.exclude in GlobalProtect Discussions

linux /etc/iproute2/rt_tables filled with 231 pangp.include and 232 pangp.exclude

pmansfield — Wed, 17 Dec 2025 09:19:31 GMT

system:

* fedora 43 x86-64 fully patched

* GP client 6.3.3

the linux file for giving routing tables a name is getting stuffed with the same things over and over. there were over 2100 duplicate entries!!

# head /etc/iproute2/rt_tables 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude # sort < !$ | uniq -d -c sort < /etc/iproute2/rt_tables | uniq -d -c 1063 231 pangp.include 1063 232 pangp.exclude

this is the GP package I have installed

# rpm -qi GlobalProtect_UI_rpm-6.3.3-619.x86_64 Name : GlobalProtect_UI_rpm Version : 6.3.3 Release : 619 Architecture: x86_64 Install Date: Mon 13 Oct 2025 10:22:57 BST Group : Applications/System Size : 40917917 License : GPL Signature : (none) Source RPM : GlobalProtect_UI_rpm-6.3.3-619.src.rpm Build Date : Wed 01 Oct 2025 17:42:16 BST Build Host : f0d9790b99e9 URL : www.paloaltonetworks.com Summary : Palo Alto Networks GlobalProtect VPN Client Description : Palo Alto Networks GlobalProtect VPN Client

overall the client is pretty crappy, some of the settings menus are invisible because the color scheme is white on white or black on black. Dismal effort, shows very poor testing by PaloAlto.

Re: linux /etc/iproute2/rt_tables filled with 231 pangp.include and 232 pangp.exclude

JayGolf — Thu, 18 Dec 2025 15:30:12 GMT

Hey @pmansfield ,

Thanks for taking the time to gather all of that! Those entries should only exist once, so the client continuously re-adding them points to unexpected behavior. I don't see any known issues related to this on my end.

I’d recommend opening a support ticket so this can be properly documented and looked at by engineering. If you include the OS version (Fedora 43), the GP client version (6.3.3-619), and the output showing the duplicates, that should give Support a good starting point.

Appreciate you calling this out! once it’s in a case, it’s much easier for us to track and improve upon.

Re: linux /etc/iproute2/rt_tables filled with 231 pangp.include and 232 pangp.exclude

pmansfield — Fri, 19 Dec 2025 11:33:57 GMT

the forum lost my reply, writing it again...

I do not have access to the support service as I am an end user, and do not think my company's infosec people care about us minority linux users, I had a hard enough time even getting the client rpm in the first place.

I cleared out the excess entries a few days ago and it continued to grow.

$ more /etc/iproute2/rt_tables # the pangp entries will grow out of control as the daemon keeps adding them 231 pangp.include 232 pangp.exclude 666 splitter 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude