My question is: will OpenVPN (server) ensure that my assigned IP addresses (ipp.txt) are always obeyed? Or with other words is this option spoof-safe?
I tried to test it, but there is no easy way (without compiling a hacked client) - the normal client will always obey the ifconfig directive pushed by the server (and assigning a static IP for the interface will result in an error).
But these are all client-side measures. Will the server DROP all packets with an IP address different than the one assigned by it?