How to limit OpenVPN login using IP filtering?

FedericoCoppola

Hi all,
I have a simple OpenVPN deployment on my Raspberry PI 4.

Can I limit OpenVPN login only from some Internet public IP?
For example I would limit OpenVPN login just from italian and german public IP?
Can I do it directly from OpenVPN server settings?

I do not have any hardware firewall in this very simple deployment (it is my home network).
I have just iptables on my Raspberry.
Can I do this kind of settings without using iptables?

My IP tables in this moment:

root@raspberry# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere             udp dpt:1195
ACCEPT     all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Thanks for your help!
Federico

TinCanTech

Raspberry Pi has iptables, use that to filter out other sources.

If you feel lucky then you can try this: https://github.com/TinCanTech/easy-tls

Easy-TLS can build TLS-Crypt-V2 keys (for clients), which encrypt a specific address,
or range, from which a client key can be used.

FedericoCoppola

Thanks!
I will try with IPTables!

Thanks
Federico