-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

------- Original Message -------
On Friday, October 20th, 2023 at 00:31, Bo Berglund <bo.bergl...@gmail.com> 
wrote:

<snip>

> I have done that previously using ccd commands to assign a user a specific IP
> address and then block that address in IPTABLEWS from reaching the LAN (except
> the gateway of course).

You do not need to make an exception for the Server LAN gateway.
Your client gateway has been redirected to the Server IP, not the Server GW IP.

In your case, the iptables rule to block the entire Server LAN is what you need.
This still allows client<to>internet traffic to flow.

enjoy!

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAnBYJlMdYuCZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAAA0Bgf9EsIHcCKXSoJWTzGV6SWdymQGl0oQSWz9Ym4gjHE41CO3w6Eb
IBtObMizt4hoPV6gIlvVKwvYYeXA82EG57Hk3O4anN9coQA8h55O51mCf4zE
Dx9qk66z1LyZmpRGxqVW0/c+N7s1i4uC2APLp/18VychKBciMG2px7PBCOWD
PaguX9BUPUicQGcoJoADiaWLEp/VF6dEaRuISqo/7KUTYRgQTzM5wCCIf6z/
xnzo7JMnL73BBLuBQ937cCVjWNsDdqO9wAz5BLFyFwWCaVtW7X7bdslWWSN+
CFYTSsMP2FltXVujx94I7+8DNhSeuNF7BHj62abRhKyaiS7F9R+lfA==
=Ufie
-----END PGP SIGNATURE-----

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to