Don't send ICMP redirects when tun0 goes down.

Sending an ICMP redirect to a peer machine could poison its route cache
if the default gateway ignorantly tries to route packets that aren't
  routable, and the packets are dropped several hops away.  Your peer
  servers will never try to use the VPN again until you flush the local
  route cache on each peer.

  D'oh.