Restrict torrent access on openvpn

bnbnqwe

I wanted to block torrent access by importing some rules like access only port 80 n port 443. I know it cant block torrent fully, but it somehow restricts torrent to a less extent and easier than setup of l7-filter....So, i make the following rules in exact order

iptables -A FORWARD -m state –state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 10.1.0.0/24 -p tcp –dport 80 –j ACCEPT
iptables -A INPUT -p udp –dport 53 -j ACCEPT
iptables -A FORWARD -s 10.1.0.0/24 -p tcp –dport 443 –j ACCEPT
iptables -A FORWARD -s 10.1.0.0/24 -p icmp –j ACCEPT
iptables -A FORWARD -s 10.1.0.0/24 –j DROP

iptables -t nat -A POSTROUTING -o venet0 -j SNAT –to-source 123.123.123.123
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT –to-source 123.123.123.123

But problem is that, my vpn can only open ip adresses now… i.e, it cant resolve hostnames into ip. i think it is not acccepting dns server 53 as well. So, how can i fix it?

Mine virtualization is Openvz and OS is centos 6

Mimiko

i think it is not acccepting dns server 53 as well.

Did you install a DNS server on your VPN server? As UDP 53 is opened for input, not forwarding. Do you push your DNS server to client?

bnbnqwe

Well , I have used these to push dns servers

push “dhcp-option DNS 8.8.8.8″
push “dhcp-option DNS 8.8.4.4″

And I have opened Udp 53,9201,1194 and tcp 443 in my openvpn server...

So, I had already make iptable rule to route and forward traffic previously while installing openvpn...
but later , wanted to restrict torrent access and now i m getting this error