client to client visibility

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
alberto
OpenVpn Newbie
Posts: 6
Joined: Wed May 25, 2011 8:58 am

client to client visibility

Post by alberto » Wed May 25, 2011 10:11 am

Hi!
Is it possible to config this options in this way:
- server can see all the clients
- one client can see all the clients (like the server)
- the other clients can't see each other, they only can see the server.

Thanks in advance!

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: client to client visibility

Post by janjust » Wed May 25, 2011 10:32 am

yes this is possible (on linux servers)

* do NOT use 'client-to-client'
* use iptables to filter out unwanted traffic
* to allow all traffic between clients
- make sure ip_forwarding is enabled
- add an iptables rules similar to

Code: Select all

iptables -I FORWARD -i tun+ -j ACCEPT
iptables -I FORWARD -o tun+ -j ACCEPT
To allow only a single client IP, use something like

Code: Select all

iptables -I FORWARD -i tun+ -s 10.8.0.26/32 -j ACCEPT
iptables -I FORWARD -o tun+ -j ACCEPT

Post Reply