I'm trying to setup client access policies, akin to what is described in openvpn documentation. The configuration will use tun device
in the above example, it seems the only thing restricting
contractors is an ifconfig command being pushed from the server. What happens if the client just comments the
pull directive, the client will simply not connect?
I've read this FAQ, and makes me a bit nervous that a unauthorized client could access off-limits networks by fiddling locally with ifconfig. Is it secure to rely on this sort of client configuration?
if the answer is that is not that secure, what would be the best way to secure network access policies for different clients?