Hi, Within the OpenVPN Access Server interface or via the terminal is there a way to prevent client connections attempts [u][b]from[/b][/u] selected internal and external IPs? I did think of using Linux's /etc/hosts.deny but it will invariably break legitimate connections to internal resources. thanks John

Prevent client connection attempts from selected internal and external IPs

johnds

Hi,

Within the OpenVPN Access Server interface or via the terminal is there a way to prevent client connections attempts from selected internal and external IPs?

I did think of using Linux's /etc/hosts.deny but it will invariably break legitimate connections to internal resources.

thanks

John

johnds

Looks like the below GUI control is already configured in a sane manner:

USER MANAGEMENT > User Permissions > More settings > Allow Access From: "all server-side private subnets" [checkbox]

above not flagged by default.

openvpn_inc

Hi John,

You'll find that fine-grained control of user/group access rules requires the command line interface:
https://openvpn.net/vpn-server-resources/managing-user-and-group-properties-from-command-line/

regards, rob0