Hi ! My server is configured with client-to-client parameter, and my clients have different networks (10.1.1.0/24 to 10.1.5.0/24). Traffic between sites works very well but I would like to block traffic from one site (10.1.5.0/24) I've tried : [code]iptables -A FORWARD -i tun0 -s 10.1.5.0/24 -d 10.1.0.0/16 -j DROP[/code] but it doesn't work. Can I do this restriction with iptables ? Or do I have to disable client-to-client and set manually connections between sites with iptables ? Thanks

Thanks for trying to help me, but this method not working to me. [url=https://www.walgreenslistens.biz/][color=#000000][size=50]Walgreenslistens[/size][/color][/url]

iptables and client-to-client

fanfan_2a

Hi !

My server is configured with client-to-client parameter, and my clients have different networks (10.1.1.0/24 to 10.1.5.0/24). Traffic between sites works very well but I would like to block traffic from one site (10.1.5.0/24)

I've tried :

iptables -A FORWARD -i tun0 -s 10.1.5.0/24 -d 10.1.0.0/16 -j DROP

but it doesn't work. Can I do this restriction with iptables ?

Or do I have to disable client-to-client and set manually connections between sites with iptables ?

Thanks

Pippin

Firewall is basically off topic but the tip is, do not use client-to-client.
Maybe helpful:
https://community.openvpn.net/openvpn/wiki/HowPacketsFlow

TinCanTech

--client-to-client allows openvpn server to route between clients without passing through the kernel.

If you need to add firewall rules to filter specific traffic between clients then you must not use --client-to-client.

Client to server is not effected by --client-to-client.

Firewall rules are much more complicated.

fanfan_2a

ok thanks for the replies, i'm gonna work on it

Bailey1

Thanks for trying to help me, but this method not working to me.

Walgreenslistens