diff --git a/vpnsetup.sh b/vpnsetup.sh
index 1d3c6e0..464f3ea 100755
--- a/vpnsetup.sh
+++ b/vpnsetup.sh
@@ -70,7 +70,7 @@ if [ "$(id -u)" != 0 ]; then
 fi
 
 def_iface=$(route 2>/dev/null | grep -m 1 '^default' | grep -o '[^ ]*$')
-[ -z "$def_iface" ] && def_iface=$(ip -4 route list 0/0 2>/dev/null | grep -Po '(?<=dev )(\S+)')
+[ -z "$def_iface" ] && def_iface=$(ip -4 route list 0/0 2>/dev/null | grep -m 1 -Po '(?<=dev )(\S+)')
 def_state=$(cat "/sys/class/net/$def_iface/operstate" 2>/dev/null)
 if [ -n "$def_state" ] && [ "$def_state" != "down" ]; then
   if ! uname -m | grep -qi '^arm'; then
diff --git a/vpnsetup_centos.sh b/vpnsetup_centos.sh
index 9508325..6e93482 100755
--- a/vpnsetup_centos.sh
+++ b/vpnsetup_centos.sh
@@ -60,8 +60,8 @@ if [ "$(id -u)" != 0 ]; then
   exiterr "Script must be run as root. Try 'sudo sh $0'"
 fi
 
-def_iface=$(route 2>/dev/null | grep '^default' | grep -o '[^ ]*$')
-[ -z "$def_iface" ] && def_iface=$(ip -4 route list 0/0 2>/dev/null | grep -Po '(?<=dev )(\S+)')
+def_iface=$(route 2>/dev/null | grep -m 1 '^default' | grep -o '[^ ]*$')
+[ -z "$def_iface" ] && def_iface=$(ip -4 route list 0/0 2>/dev/null | grep -m 1 -Po '(?<=dev )(\S+)')
 def_state=$(cat "/sys/class/net/$def_iface/operstate" 2>/dev/null)
 if [ -n "$def_state" ] && [ "$def_state" != "down" ]; then
   case "$def_iface" in