client to client visibility

alberto

Hi!
Is it possible to config this options in this way:
- server can see all the clients
- one client can see all the clients (like the server)
- the other clients can't see each other, they only can see the server.

Thanks in advance!

janjust

yes this is possible (on linux servers)

* do NOT use 'client-to-client'
* use iptables to filter out unwanted traffic
* to allow all traffic between clients
- make sure ip_forwarding is enabled
- add an iptables rules similar to

iptables -I FORWARD -i tun+ -j ACCEPT
iptables -I FORWARD -o tun+ -j ACCEPT

To allow only a single client IP, use something like

iptables -I FORWARD -i tun+ -s 10.8.0.26/32 -j ACCEPT
iptables -I FORWARD -o tun+ -j ACCEPT