How to filter traffic if using Windows Server?

jefftan7729

Hi All,

I am hosting OpenVPN on Windows Server 2008.
Even if i disabled ICMP echo-in using Windows Firewall, i noticed my VPN client still able to ping another VPN client.
I am using ethernet bridging(TAP).
Is there anyway to filter traffic if i use Windows Server?

Thanks!

jefftan7729

Hi debbie10t,
My mistake.
This is my server config:

port 1194
proto udp
dev tap
dev-node 1194
ca ca.crt
cert server.crt
key server.key  
dh dh1024.pem
server 10.0.0.0 255.255.0.0
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

This is my client config:

client
dev tap
dev-node MYTAP
proto udp
remote myvpnserver.com 1194
remote-random
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert CLIENT.crt
key CLIENT.key
ns-cert-type server
verb 3

jefftan7729

I am trying to achieve LAN to LAN gaming here.
My setup:
Server1 = windows server 2008
Router 1 = Router that installed with OpenVPN which establish connection to my server, and bridged with LAN interfaces.

Problems that i faced:
1) Unable to filter traffic between clients to clients.
PC4 is getting DHCP IP from router 1!
I already tried to disabled port 67 & 68 in server but couldn't help.

Any help is appreciate!

jefftan7729

Hi debbie10t,

Thanks for reply!
Yes, i renamed my adapter to 1194.
In this situation, how do i filter traffic?
I tried windows firewall, even i disable ICMP echo-in, i am unable to ping my server.
However, from client still able to ping to client.
I noticed my PC4 is getting DHCP IP from Router1...

jefftan7729

hi guys, really appreciate if anyone can shed me some lights... :oops:
router1 flashed with OpenWRT, tap interface bridged with LAN interface...
so in this case, how to i filter out DHCP traffic?
thanks!!!