Hot answers tagged

2

You can give the tun device name in the .ovpn configuration file: Edit the file /etc/openvpn/server-vpngw.conf and add such lines: dev tun3 client-config-dir /etc/openvpn/ccd Then create the following file /etc/openvpn/ccd/vpn-name and edit it like so: ifconfig-push 10.8.2.202 10.8.2.201 push "route 172.16.12.0 255.255.255.0" push "route 10.2.4.0 255....


1

Depending on how nice you want to be to the client, a possible solution can be: iptables -I INPUT -p udp --dport 111 -j DROP or iptables -I INPUT -p udp --dport 111 -j REJECT


1

You can specify the source IP address or subnet with the parameter "-s" and then drop all the traffic from eth1 to eth0 sudo iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT sudo iptables -A FORWARD -s 192.168.1.1 -i eth1 -o eth0 -j ACCEPT sudo iptables -A FORWARD -s 192.168.1.0/24 -i eth1 -o eth0 -j ACCEPT sudo iptables -A ...



Only top voted, non community-wiki answers of a minimum length are eligible