Re: [Openvpn-users] OpenVPN and IPTables

2016-05-26 Thread Selva Nair
Hi, On Thu, May 26, 2016 at 4:00 PM, Scott Crooks wrote: > > So I did some testing with forwarding rules in place. Still having a bit > of trouble understanding why it's not working. As David recommended, I used > the wiki page here as a reference: > https://community.openvpn.net/openvpn/wiki/Br

Re: [Openvpn-users] OpenVPN and IPTables

2016-05-26 Thread Scott Crooks
Greetings, So I did some testing with forwarding rules in place. Still having a bit of trouble understanding why it's not working. As David recommended, I used the wiki page here as a reference: https://community.openvpn.net/openvpn/wiki/BridgingAndRouting. The section "Using routing and OpenVPN n

Re: [Openvpn-users] OpenVPN and IPTables

2016-05-19 Thread Scott Crooks
Rob/David, Thanks for the reply, and your patience, it was informative. To clarify, my OpenVPN solution is routing FROM RFC 1918 addresses TO RFC 1918 addresses. The user connected to the VPN doesn't actually route any Internet traffic. I am dynamically pushing routes using the `client-connect` ho

Re: [Openvpn-users] OpenVPN and IPTables

2016-05-19 Thread /dev/rob0
Comments to both posters inline ... On Fri, May 20, 2016 at 12:42:31AM +0200, David Sommerseth wrote: > On 19/05/16 20:47, Scott Crooks wrote: > > Thank you also for the explanation regarding the firewalling. > > Part of the problem (and why I didn't reply to /dev/rob0) is > > because when it co

Re: [Openvpn-users] OpenVPN and IPTables

2016-05-19 Thread David Sommerseth
On 19/05/16 20:47, Scott Crooks wrote: > Thank you also for the explanation regarding the firewalling. Part of > the problem (and why I didn't reply to /dev/rob0) is because when it > comes to iptables, I "don't know what I don't know" if that makes sense. > It's hard to specify what I'm going for

Re: [Openvpn-users] OpenVPN and IPTables

2016-05-19 Thread Scott Crooks
David, Thank you for the response! I remember you talking about Eupheria before in another post I wrote. The LDAP authentication / pulling rules from LDAP feature is definitely needed, and since I didn't find a project that met all of the requirements I was going for, I opted to do it myself. Tha

Re: [Openvpn-users] OpenVPN and IPTables

2016-05-19 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/05/16 18:28, Scott Crooks wrote: > Greetings, > > In order to avoid spamming this list with unrelated questions > about IPtables commands, I'm wondering is there is a book/resource > that anyone knows of that tackles how to do more advanced setu

Re: [Openvpn-users] OpenVPN and IPTables

2016-05-18 Thread /dev/rob0
On Wed, May 18, 2016 at 09:28:55AM -0700, Scott Crooks wrote: > In order to avoid spamming this list with unrelated questions about > IPtables commands, I'm wondering is there is a book/resource that > anyone knows of that tackles how to do more advanced setups with > OpenVPN and IPtables? In t

[Openvpn-users] OpenVPN and IPTables

2016-05-18 Thread Scott Crooks
Greetings, In order to avoid spamming this list with unrelated questions about IPtables commands, I'm wondering is there is a book/resource that anyone knows of that tackles how to do more advanced setups with OpenVPN and IPtables? It seems there are many examples on the Internet of "redirect all

Re: [Openvpn-users] openvpn and iptables rules advice

2014-04-28 Thread Brian Austin - Versa Net
also it can be handy to -J LOG before -J DROP to see whats being dropped. On 28/04/2014 9:24 PM, /dev/rob0 wrote: > On Mon, Apr 28, 2014 at 12:36:07PM +0300, Dmitry Korzhevin wrote: >> Guys, please advice, i use next debian iptables rules to allow >> my udp services: >> >> (openvpn server works

Re: [Openvpn-users] openvpn and iptables rules advice

2014-04-28 Thread /dev/rob0
On Mon, Apr 28, 2014 at 12:36:07PM +0300, Dmitry Korzhevin wrote: > Guys, please advice, i use next debian iptables rules to allow > my udp services: > > (openvpn server works on port 6000) > > iptables -I OUTPUT 2 -p udp --dport 53 -j ACCEPT rob0 Rule of Thumb: If you have to ask for help to ma

[Openvpn-users] openvpn and iptables rules advice

2014-04-28 Thread Dmitry Korzhevin
Guys, please advice, i use next debian iptables rules to allow my udp services: (openvpn server works on port 6000) iptables -I OUTPUT 2 -p udp --dport 53 -j ACCEPT iptables -I OUTPUT 2 -p udp --dport 1700:1750 -j ACCEPT iptables -I OUTPUT 3 -p udp -m udp --dport 1812 -j ACCEPT iptables -I OUTP