jo76
Hi,
I have a rasberry pi with openvpn client installed. When i connect with the openvpn client some services binds to the tun0 interface and therefore exposes the services (open tcp ports) to the remote network. I would like to block traffic to this open ports. I tried firewalling using ufw to config iptables with no success. Using nmap to scan the tun interface always shows open ports.
Can anyone help me? Point to another direction Im out of ideas.
/j
maikcat
you should consider configuring your running services to bind only to your eth0 interface only.
you can apply an iptable INPUT rule dropping traffic from tun+ interfaces 😉
Michael.
jo76
Tried to prevent services from binding to the tun interface. And it worked for most of the services. But I'm running a mindlna server and the network_interface option in mindlna config file has no effect. I've posted that issue at minidlna forum. So all my media is available att the tun interface :o
I will try your suggestion using iptables to adda rule. But i thought the ufw command added rules to iptables?
