Hi,
I'd like to configure my server to check if the source (public) IP of the machine client connecting to it is the correct given one (I'd use dydns or similar ip to name services).
Is there a way to let it do this?
I'm using ccd configuration, I guess there should be something there to configure, but I didn't manage to understand the directive to use.
Thanks!
How to check if source IP of the client is "a given one"?
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
-
- OpenVpn Newbie
- Posts: 15
- Joined: Wed Feb 02, 2011 7:03 pm
- maikcat
- Forum Team
- Posts: 4200
- Joined: Wed Jan 12, 2011 9:23 am
- Location: Athens,Greece
- Contact:
Re: How to check if source IP of the client is "a given one"
hi there,
>to check if the source (public) IP of the machine client connecting to it is the correct given one (I'd use dydns or similar ip to name services).
i you want to check your clients from which ips are connecting you can only see who is using what ip
if you use status directive inside server config file.
to filter them maybe using a script inside your configuration...
what exactly do you have in mind?
ps:if you want your clients to connect from static ips ,why dont you block them using a firewall?
ps2:if you use certificates you can easily block someone if he loses the certificate..
cheers,
michael
>to check if the source (public) IP of the machine client connecting to it is the correct given one (I'd use dydns or similar ip to name services).
i you want to check your clients from which ips are connecting you can only see who is using what ip
if you use status directive inside server config file.
to filter them maybe using a script inside your configuration...
what exactly do you have in mind?
ps:if you want your clients to connect from static ips ,why dont you block them using a firewall?
ps2:if you use certificates you can easily block someone if he loses the certificate..
cheers,
michael
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)
Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)
"objects in mirror are losing"
Long live Dino Dini (Kick off 2 Creator)
Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)
"objects in mirror are losing"
-
- OpenVpn Newbie
- Posts: 15
- Joined: Wed Feb 02, 2011 7:03 pm
Re: How to check if source IP of the client is "a given one"
I was only based on the idea of checking if the correct client was connecting from a specific chosen location. I mean to be sure not to "risk" to have clients exchanging certs. Anyway if it's not a feature, I'll simply randomly check the status as you suggested to see if sources correspond. Thinking to the original idea again, it should be largely sufficient! Thanks for your help!!