Hi:
My server config (pivpn raspberry) is running this config:
port 1194
dev tap
ifconfig 10.3.0.1 255.255.255.0
ping 10
comp-lzo
verb 5
mute 10
tls-server
mode server
client-to-client
A Typical client configs is like this:
remote XXXXXX
port 1194
proto udp
dev tap
ifconfig 10.3.0.7 255.255.255.0
ping-restart 60
ping-timer-rem
persist-tun
persist-key
resolv-retry 86400
ping 10
comp-lzo
verb 4
mute 10
tls-client
All the clients are on the same subnet (10.3.0.X/24)
With this config, every client can "comunicate" with every client.
I want to filter wich client can access wich client.
I have tried filtering with iptables, but no luck.Tried adding this kind of lines to the iptables:
sudo iptables -A INPUT -i tap0 -p udp --dport 1194 -s 10.3.0.6 -d 10.3.0.5 -j DROP
Can anyone help please?
