OpenVPN Support Forum

Hi,

Within the OpenVPN Access Server interface or via the terminal is there a way to prevent client connections attempts from selected internal and external IPs?

I did think of using Linux's /etc/hosts.deny but it will invariably break legitimate connections to internal resources.

thanks

John

Looks like the below GUI control is already configured in a sane manner:

USER MANAGEMENT > User Permissions > More settings > Allow Access From: "all server-side private subnets" [checkbox]

above not flagged by default.

Hi John,

You'll find that fine-grained control of user/group access rules requires the command line interface:
https://openvpn.net/vpn-server-resource ... mand-line/

regards, rob0