I have an OpenVPN server running on a Debian box. What I'd like to do is to block all traffic between clients connected to that OpenVPN server.
The server has a local IP of 10.10.10.1 and the clients get IPs between 10.10.10.2-10.10.10.8.
I tried using iptables, but seems that the traffic between the clients never leave tun0 so I cannot block it.
What can I do? Is there some iptables rule that can block traffic inside an interface? (tun0)
client-to-client is NOT enabled in server.conf, but for some reason users can still ping each other and communicate with each other.