Routing all traffic only to specific clients

nicolasg

Hi All,

I have 2 questions regarding the routing of all traffic through the VPN server.

1) Is there a way I can enable the directive push "redirect-gateway def1" but only to specific user/clients ? I have a VPN server supporting 50 users but I want only 5 users to be routing all of their traffic through the VPN server.

2) According to the VPN how-to ( http://openvpn.net/index.php/open-source/documentation/howto.html) I need to edit the IP tables with the entry :

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

As the VPN server is an Amazon instance with IPtables disabled by default, is there any risk running this command that could lock me out of the instance ? The reason I'm asking this is because the VPN server is also running other critical services and if I lock my self out I won't be able to login again...

Thanks in advance,
Nicolas.

dropje

You should be able to push redirect-gateway def1 in a client config dir (ccd)
Take a look at the manual on learning how to do this.

nicolasg

Hi,

I did create a client config in the CCD dir, I was able to successfully se the push "route x.x.x.x y.y.y.y" option to the client but when I also tried the redirect-gateway def1 option it doesn't work.

In the logs I can see this message :

Options error: option 'redirect-gateway' cannot be used in this context

Any ideas ? can some one confirm is possible to use the redirect-gateway def1 in the client configuration file (CCD).

Regards,
Nicolas.

nicolasg

I found the problem, the configuration syntax was wrong in the ccd file.

I had

"redirect-gateway def1"

instead of

push "redirect-gateway def1"