Adding iptables route on openvpn connect

kam-alien

I have my openvpn server up and running and I push certain routes to my clients via the ccd directive, I would like to know how can I update the iptables based on the ccd files when the client connects.

So lets say my ccd for client1 is :

```
ifconfig-push 10.8.0.45 255.255.255.0
push 'route 10.10.0.45'
```
and I want to add this to the iptables.
```
iptables -A FORWARD -s 10.8.0.45 -d 10.10.0.45 -j ACCEPT
```
and then
```
iptables -A FORWARD -s 10.8.0.0/24 -d 10.10.0.0/16 -j DROP
```
If someone can point me in the right direction would be much appreciated, im fairly newb with bash scripts

KBerger

Iptables is not for routing, it's a firewall implementation for Linux OS. Other OS's have different firewalls with different command syntax. As opposite to routing concept, which is basically the same across different platforms and OS's supported by OpenVPN.
There is another option for whatever commands you want to be executed upon connect:

 --route-up cmd                                                                    
              Run command cmd after routes are added, subject to
              --route-delay.

              cmd consists of a path to script (or executable program),
              optionally followed by arguments. The path and arguments may be
              single- or double-quoted and/or escaped using a backslash, and
              should be separated by one or more spaces.

In /etc/openvpn/client.conf that you use on the client machine it looks like this:

...
route-up /path/to/script/route-up.sh

In that script you put your iptables commands.

KBerger

But I must add, man openvpn has most everything you may need 😃 😃 .