cemopolat
Hi,
We are using openvpn for both "client to client" and "client to server" connections (rdp, mysql etc.)
our config files include;
..
dev tap
proto tcp
..
Everything works fine, but I wouldn't like the clients see all others and servers on their network neighbourhood.
We also use "Dropbox" and it tries to sync everything over OpenVPN (since it behaves like a LAN)
Any help would be greatly appreciated, especially if it doesn't require "client side" config changes.
Best regards...
Cemo
maikcat
without posting the full config only assumptions can be made...
Michael.
cemopolat
Hi Michael,
Please see our .cnf content below.
As I said before, we need client-to-client connection but without broadcasting if possible. In other words we wouldn't like OpenVPN behave like a LAN. e.g. network neighbourhood etc..
multihome
port 443
proto tcp
dev tap0
ca '/etc/openvpn/CA/cacert.pem'
cert '/etc/openvpn/CA/certs/17D62F4DD13C259E.pem'
key '/etc/openvpn/CA/private/vpn-vpn-new.pem'
crl-verify /etc/openvpn/CA/crl/latest.pem
dh /etc/openvpn/dh1024.pem
server 10.10.7.0 255.255.255.0
ifconfig-pool-persist '/etc/openvpn/vpn-new-ipp.txt'
;push "redirect-gateway"
client-to-client
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
comp-lzo
max-clients 254
user nobody
group nogroup
persist-key
persist-tun
status '/var/log/openvpn/status-vpn-new.log'
log-append '/var/log/openvpn/vpn-new.log'
verb 3
;mute 20
maikcat
i can only think of 2 workarounds..
1)switch to tun mode
2)use ebtables to filter layer 2 traffic..
regards
Michael.
cemopolat
Thx Michael.
Cemalettin
