Comment by the8472

I wonder whether this attack also works when the VPN device and VPNed is put in a separate network namespace, which would have its own routing table.