Hi,
I have a vpn network (192.168.106.x) within a "public" network (147.*.*.*). The vpn serves just to connect several computers together, it is not routed to the internet. However, the internal address of the individual members of the VPN is visible from the public network. Indeed, if I try from a computer, which is not involved with the lan, to check e.g. the server:
# nmap -sP 192.168.106.1
Starting Nmap 6.01 ( http://nmap.org ) at 2013-11-16 23:27 CET
Nmap scan report for 192.168.106.1
Host is up (0.00014s latency).
MAC Address: 00:40:... (VIA Technologies)
Nmap done: 1 IP address (1 host up) scanned in 0.02 seconds
I have tried to use iptables to block all traffic between eth0 and tun0:
ETH=eth0
VPN=192.168.106.1/16
iptables -A OUTPUT -o $ETH -d $VPN -j DROP
iptables -A INPUT -i $ETH -s $VPN -j DROP
all traffic is perfectly filtered, but still, the IP addres of tun0 interface is visible from the public network.
Is there any way to completely hide address of the tun0 interface?
Best regards,
Cyril