Prevent client connection attempts from selected internal and external IPs

johnds · Post by **johnds** » Mon Mar 28, 2022 9:31 am

Hi,

Within the OpenVPN Access Server interface or via the terminal is there a way to prevent client connections attempts from selected internal and external IPs?

I did think of using Linux's /etc/hosts.deny but it will invariably break legitimate connections to internal resources.

thanks

John

johnds · Post by **johnds** » Mon Mar 28, 2022 3:55 pm

Looks like the below GUI control is already configured in a sane manner:

USER MANAGEMENT > User Permissions > More settings > Allow Access From: "all server-side private subnets" [checkbox]

above not flagged by default.

Post by **openvpn_inc** » Sat Apr 02, 2022 4:27 pm

Hi John,

You'll find that fine-grained control of user/group access rules requires the command line interface:
https://openvpn.net/vpn-server-resource ... mand-line/

regards, rob0

OpenVPN Support Forum

Prevent client connection attempts from selected internal and external IPs

Prevent client connection attempts from selected internal and external IPs

Re: Prevent client connection attempts from selected internal and external IPs

Re: Prevent client connection attempts from selected internal and external IPs