My server connects to some strange resources via OpenVPN, and every time the OpenVPN client starts up, an ovpn
interface is brought up.
I want to expose only selected ports (say, MySQL) to this interface, so I have this rule in my iptables:
iptables -A INPUT -i ovpn -p tcp --dport 3306 -j ACCEPT
However, because the OpenVPN client can disconnect and reconnect without intervention, the link ID (as shown by ip link show ovpn
) can change.
Will the above iptables rule continue to work after the link disappears and appears again (with a different ID)?