Port filtering

[shiranp]

Hi,

I have a multiple OpenVpn clients connected to my server some of these client are Android.

I need todo port filtering ( in order to enable specific ports through the clients).

Can some one tell me how to do it?

Server

port 1194


proto tcp

dev tun

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key" # This file should be kept secret

dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt


ifconfig 10.8.0.1 255.255.255.0
route 192.168.11.0 255.255.255.0
route 192.168.12.0 255.255.255.0
route 192.168.13.0 255.255.255.0
route 192.168.14.0 255.255.255.0
client-config-dir ccd



keepalive 10 120

comp-lzo

status openvpn-status.log

verb 6

Client

client

dev tun

proto tcp


remote 10.1.11.10 9011
remote my-server-2 1194

resolv-retry infinite

nobind

persist-key
persist-tun

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\sor1.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\sor1.key"

ns-cert-type server

comp-lzo


verb 3

I have some CCD files for the routing,

anyway I need some help here.

Thanks In advance,

Shiran

[shiranp]

So what kind of filtering can I do?

Because I saw something that I didn't fully understand regarding the IPtable and DROP of packets according to IP and Ports. Apparently I'm getting it wrong.

What can I do to use network policies?

[shiranp]

Hi,
Thanks for the quick response, as I reviewed the documentation I have noticed they all related to linux os, and I am looking for solution for windows with the same configuration implemented in the OpenVpn ( if that exists).

for more explicit demand, let say that I want my OpenVPN android client (or any othe Androyd Client) to be able to access only to ports at range 5000-5100, and ports 7000,7001. and I want it to DROP packets for any other ports.

How can I do that In OpenVPN? Should I us use OS firewall?

[valterbrazzini]

Hi, do you find a solution?

Is it possibile to do filter ports for client with OpenVPN on Ubuntu and UFW ?

I would like to make possibile only specific ports enable for the network pushed to the clients?

regards