Block WAN access for OpenVPN clients

orion44

Hello,

I'm running two OpenVPN servers on my ASUS RT-AC5300 router running Asuswrt-Merlin 380.66. I would like to block WAN access for my second OpenVPN server, i.e. just allow LAN access. I am aware the option "Direct clients to redirect Internet traffic" set to "No" does not block WAN access.

Can this be done via the Custom Configuration field at the bottom of the page or do I have to setup the firewall rules (iptables) manually to block OpenVPN server #2 subnet from the WAN?

Thanks!

TinCanTech

orion44 wroteI would like to block WAN access for my second OpenVPN server, i.e. just allow LAN access

You have setup

[X] Push LAN to clients
[ ] Direct clients to redirect internet traffic

That should be enough ..

orion44 wrotedo I have to setup the firewall rules (iptables) manually to block OpenVPN server #2 subnet from the WAN?

You could do that also.

orion44

Thanks for the follow-up, but that does not block WAN access. The OpenVPN client can choose to route all IPv4 traffic through the tunnel to my server and that gives them WAN access. I need a way to block access on my server and just wondered if I could it as part of the Custom Configuration field at the bottom.

TinCanTech

OpenVPN provides the tunnel .. it does not provide for any filtering.

So use your firewall for filtering.