6

iptables for openvpn/dd-wrt

view full story
linux-howto

http://serverfault.com – I'm hoping some iptables or dd-wrt guru can help me here. I'm basically trying to configure my network with an additional wireless virtual interface so that I have a separate SSID (wl1.1) that I can use for VPN traffic via openVPN enabling me to access my vpn connection just by switching wifi network. I've a test dd-wrt router that I have configured at the moment and I'm able to connect to my openVPN server okay, however this is forwarding all traffic regardless of wireless interface over the VPN. I think I just need some iptables rules to forward all traffice from the virtual wireless inte (HowTos)

u85500's picture
Submitted by u85500 on 05/20/2012 – Made popular on 05/20/2012

Stories similar to iptables for openvpn/dd-wrt

IPTABLES, SSH & OpenVPN 3 days 21 hours ago

I'm trying to figure out what I need to put in my IPTABLES configuration and I'm hoping someone might be able to help.

I have a cable internet connection with a DLink WRT54GS router. Then I have a Raspberry Pi connected via ethernet. I've configured the RasPi as a NAS server, SSH server and want to enable OpenVPN.

Listed below is the IPTABLES that I tried.

Hey

I have ubuntu as a vpn gateway for my local network

My openvpn uses tap interface

I am worried that if i lose my openvpn connection, my local network (eth0) will be wild open

I was wondering if i am missing something in iptables to secure it more, for example if i lose my openvpn, to stop my local network accessing the internet, or if there is something else i can do?

I have an OpenVPN server and I can connect to it just fine but I can not communicate with any other hosts on the network including the server. I can't ping from the server to an OpenVPN client, I can't ping from an OpenVPN client to the OpenVPN server, I can't ping from OpenVPN client to OpenVPN client or from OpenVPN client to normal LAN host and vise-versa.

I want to create an openvpn service on a dedicated server I have, for some friends so that they are able to play online games faster.

Is there an easy way to restrict which traffic I allow them with iptables ? It seems iptable is not very easy to maintain and we can easily get kicked out of our own server.

I have an Ubuntu Box on my LAN that I would like to:

Send all external traffic over an OpenVPN connection (tun0) Deny all external traffic if the OpenVPN connection should fail Allow all internal traffic to my 192.168.0.0 network

Any ideas on where I can get some example iptables configurations for this type of setup?

Ihave OpenVPN and PPTP installed on a VPS. I'm having a few questions that I can't seem to get a firm answer on.

I want to install OpenVPN on 1.1.1.1 (eth0, public IP address) and PPTP on 1.1.1.2 (eth0:1, public IP address). I was able to achieve this with SNAT.

HI

Im trying to make a firewall working with openvpn. there is only one interface eth0, but when openvpn connects it gets virtual interface tun0. What im trying to achieve is that the computer must not connect to internet through eth0 unless vpn is up.

i installed and configured the OpenVPN Module on Plesk.

I want to estable a openVPN connection on one of my computers. But I want to make sure that the connection is secure by filtering everything except for openVPN. Therefore openVPN will be the only way to access the internet.

What would be the best way to do this? iptables?