shasi420
Hi all
I have setup an openvpn server on a ubuntu V-Server.
Everthings working fine so far.
I can connect from clients to the internet and all trafic is routed through the tunnel.
My problem is that i dont know how to avoid ping between the clients??
Please Help!
################################
client.ovpn
tls-client
pull
proto tcp-client
dev tun
remote MYSERVERADRESS PORT
ca PFADE\ZU\DEN\KEYS
cert PFADE\ZU\DEN\KEYS
key PFADE\ZU\DEN\KEYS
tls-auth PFADE\ZU\DEN\KEYS 1
comp-lzo
ns-cert-type server
script-security 2
persist-local-ip
persist-tun
tun-mtu 1500
mssfix 1450
#########################################
server.conf
mode server
tls-server
dev tun
port 1194
proto tcp-server
ca ca.crt
cert VPNserver.crt
key VPNserver.key
dh dh1024.pem
ifconfig 10.170.0.1 10.170.0.2
ifconfig-pool 10.170.0.4 10.170.1.251
route 10.170.0.0 255.255.255.0
push "redirect-gateway def1"
push "route 10.170.0.1 0.0.0.0"
push "dhcp-option DNS 91.135.69.9 91.135.68.8" # DNS-Server 1
persist-key
persist-tun
tls-auth ta.key 0 # This file is secret
status openvpn-status.log
log openvpn.log
verb 7
comp-lzo
script-security 2
tun-mtu 1500
mssfix 1450
#################################
rc.local => i am pretty sure that here is something wrong but i dont know
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
# Accept responses to pings
iptables -A INPUT -p icmp -m icmp --icmp-type echo-reply -j ACCEPT
# Respond to pings
iptables -A INPUT -p icmp -m icmp --icmp-type echo-request -j ACCEPT
# Accept traceroutes
iptables -A INPUT -p udp -m udp --dport 33434:33523 -j ACCEPT
#Enable forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward
#Allow all TUN
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A OUTPUT -o tun+ -j ACCEPT
iptables -A FORWARD -o tun+ -j ACCEPT
#Accept connections on 1194
iptables -A INPUT -p udp --dport 11194 -j ACCEPT
iptables -A INPUT -p tcp --dport 11194 -j ACCEPT
#Apply forwarding
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.170.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.170.0.0/24 -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
exit 0
THX in advanced for your help
shasi420
Please, i would really need your help, because i am a noob and i am sticking at this point since a long time.
I was reading a lot of stuff but i cant find the answer!
PLEASE HELP!!!
THX in advanced
shasi420
Hi all
Sorry, but i am confused, do i ask the wrong way?
Or is something else not good?
Please, give me a little hint, so that i know in wich direction i have to investigate!!!!!!
Only a little one, come on !
THX in advanced!!!
