linux /etc/iproute2/rt_tables filled with 231 pangp.include and 232 pangp.exclude

[pmansfield]

system:

* fedora 43 x86-64 fully patched

* GP client 6.3.3

the linux file for giving routing tables a name is getting stuffed with the same things over and over. there were over 2100 duplicate entries!!

# head /etc/iproute2/rt_tables
231 pangp.include
232 pangp.exclude
231 pangp.include
232 pangp.exclude
231 pangp.include
232 pangp.exclude
231 pangp.include
232 pangp.exclude

# sort < !$ | uniq -d -c
sort < /etc/iproute2/rt_tables | uniq -d -c
1063 231 pangp.include
1063 232 pangp.exclude

this is the GP package I have installed

# rpm -qi GlobalProtect_UI_rpm-6.3.3-619.x86_64
Name        : GlobalProtect_UI_rpm
Version     : 6.3.3
Release     : 619
Architecture: x86_64
Install Date: Mon 13 Oct 2025 10:22:57 BST
Group       : Applications/System
Size        : 40917917
License     : GPL
Signature   : (none)
Source RPM  : GlobalProtect_UI_rpm-6.3.3-619.src.rpm
Build Date  : Wed 01 Oct 2025 17:42:16 BST
Build Host  : f0d9790b99e9
URL         : www.paloaltonetworks.com
Summary     : Palo Alto Networks GlobalProtect VPN Client
Description :
Palo Alto Networks GlobalProtect VPN Client

overall the client is pretty crappy, some of the settings menus are invisible because the color scheme is white on white or black on black. Dismal effort, shows very poor testing by PaloAlto.

[JayGolf · Accepted solution]

Hey @pmansfield ,

Thanks for taking the time to gather all of that! Those entries should only exist once, so the client continuously re-adding them points to unexpected behavior. I don't see any known issues related to this on my end. 

I’d recommend opening a support ticket so this can be properly documented and looked at by engineering. If you include the OS version (Fedora 43), the GP client version (6.3.3-619), and the output showing the duplicates, that should give Support a good starting point.

Appreciate you calling this out! once it’s in a case, it’s much easier for us to track and improve upon. 

[pmansfield]

the forum lost my reply, writing it again...

I do not have access to the support service as I am an end user, and do not think my company's infosec people care about us minority linux users, I had a hard enough time even getting the client rpm in the first place.

I cleared out the excess entries a few days ago and it continued to grow. 

$ more /etc/iproute2/rt_tables
# the pangp entries will grow out of control as the daemon keeps adding them
231 pangp.include
232 pangp.exclude

666 splitter

231 pangp.include
232 pangp.exclude
231 pangp.include
232 pangp.exclude
231 pangp.include
232 pangp.exclude
231 pangp.include
232 pangp.exclude