Hi Antonio,

On 13/06/17 16:58, Antonio Quartulli wrote:
On 13 Jun 2017, at 18:49, Pippin1st via Openvpn-users 
<openvpn-users@lists.sourceforge.net> wrote:

Hello,

I`m trying to draw a picture where one can see how packets are flowing in a 
routed tun setup.

Using the Gigabit article from JJK and various iptables/routing articles i come 
to attached picture.
Since last time i spend time on this picture i added tcpip stack squares today.

So, my first question is, how close am I?
One thing I would like to highlight is that it seems that packets going from 
the App to tun0 are then re-entering routing/iptables before reaching OpenVPN.
This should not happen because packets entering tun0 are then directly 
delivered to OpenVPN.

(not sure how this could be fixed in the diagram)


I believe the diagram is correct - packets sent by an application to tun0 *ARE* processed using iptables before reaching OpenVPN - if you set a rule
  iptables -I INPUT -i tun+ -j DROP
then no packets would enter the tunnel....

JJK


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to