[deleted] hy i setup openvpn server everything is working. but i notice on server with wireshark that local ip of of server is connecting with ips of sites i browse. what is strange i block everithing expect vpn port with ip tables. when i remove postrouting i can connect to vpn but then browsing dont work of course, then is not connecting to ips of sites. so something i belive is with postrouting and howe it handles connections. on client side everithing is going throught vpn that is ok. So is this normal or i missconfigured something.
[deleted] i didnt explain goog above. hy i have vpn server behind router. connections work. setup is like this. host system 11.11.11.11 centos virtual system with vpn 22.22.22.22 centos from host system PREROUTING 11.11.11.11 to 22.22.22.22 and POSTROUTING 22.22.22.22 to 11.11.11.11 on vpn POSTROUTING 10.8.0.0/24 to 22.22.22.22 and POSTROUTING 22.22.22.22 to 11.11.11.11 i notice on server with wireshark that local ip of of host 11.11.11.11 is connecting with ips of sites i browse TCP, UDP. same time 11.11.11.11 is connected to public ip with vpn protocol. what is strange i block everithing expect vpn port with ip tables. when i remove postrouting i can connect to vpn but then browsing dont work of course, then is not connecting to ips of sites. so something i belive is with postrouting and howe it handles connections. is this normal or i missconfigured something? on client side everithing is going throught vpn that is ok.
[deleted] then i only need masquerade on router, or not. was try bridge mode first time when setup but didnt test anithyng. i change to nat beacouse i was thinking that is more secure
[deleted] hy can this be somehowe disabled by firewall. i need NAT. beacouse host system 11.11.11.11 dont have ports 80,443,53 enabled they are disabled by firewall and 11.11.11.11 connecting to this ips of websites but he canot nothing with them he yust sen request thats unneccesary.
