sbogio
I'm a newbie about OpenVpn.
I'm configuring an OpenVpn istance on a Qnap NAS server, and I have some doubts on how to configure portforwarding.
First of all I have to depicts the customer's network configuration:
- Router CISCO series 800 with an network interface on Internet (by means of ADSL) and one interface (address 95.242.65.38) linked to a Linux box (acting as firewall/proxy/nat) with network interface (address 95.242.65.33)
- Linux box (firewall/proxy/nat) linked to Router (see above) and another one network interface linked to internal LAN (address 10.0.0.254)
- Qnap NAS hosting the OpenVpn server istance linked to the internal LAN with address 10.0.0.248
I'd like use (initially) the standard OpenVpn configuration as shipped with the Qnap NAS server :
- use Account/password approach to connect to the OpenVpn server
- use standard OpenVpn address schema 10.8.0.0/10.8.0.254
- use TCP as protocol
- use TUN driver
Authorized user will be 2/3 accounts already defined into the Qnap NAS server, they connect by means of Windows/Mac laptop and will access only shared folder hosted on the Qnap NAS. They will be a 'light' roadwarrior users.
I analyzed the actual firewall rules and it seems as router forward all traffic on the firewall that is applying the real filter.
So I think I need to modify (inserting) some rules to enable traffic on specified port used by OpenVpn and forward, the incoming traffic on this port redirecting to the OpenVpn server address 10.8.0.0.
How to modify iptables (according to my needs) is my problem (I'm a newbie) and some pratical example or suggestion will be very appreciated.
best regards
stefano
