ravenpi
Okay. My iptables foo sucks. I've got OpenVPN running awesome, on stock port 1194. Unfortunately, one place I have a server set up seems to be stepping on 1194 -- but not 123 (NTP). I see three options:
1) Move my OpenVPN server to port 123 -- this is problematic, because I'm pretty sure a *different* place steps on 123.
2) Run two OpenVPN services. This has routing, etc., issues involved.
3) Have my OpenVPN server re-direct port 123 to its own port 1194. This seems like the most elegant solution, except that I can *NOT* seem to make it work.
I really want to go with option #3, as it seems the best overall. But, as noted, I just can't get it working -- no doubt because I'm screwing up my iptables commaneds. I've tried a zillion different variations, so instead of muddying the water and pasting them, I'll just ask: what would the rules be to do that?
Thanks!!
TiTex
Hi,
I don't understand what you are trying to do with port 123
Why would you want to use the NTP port on your VPN service ?
ravenpi
Because -- as stated -- the firewall at one of my host locations is stepping on 1194, but not 123. (I figured to test 123, because NTP is pretty popular. Likewise, 53, but that port I need to reserve on my OpenVPN server for DNS.)
TiTex
open up the port required on the firewall , that's the recommendation
as far as openvpn is concerned , it doesn't care what port do you use if it's not used by another socket
but ports < 1024 need root privileges
