How to check if source IP of the client is "a given one"?

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
cmatte
OpenVpn Newbie
Posts: 15
Joined: Wed Feb 02, 2011 7:03 pm

How to check if source IP of the client is "a given one"?

Post by cmatte » Wed Feb 02, 2011 7:08 pm

Hi,
I'd like to configure my server to check if the source (public) IP of the machine client connecting to it is the correct given one (I'd use dydns or similar ip to name services).
Is there a way to let it do this?
I'm using ccd configuration, I guess there should be something there to configure, but I didn't manage to understand the directive to use.
Thanks!

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: How to check if source IP of the client is "a given one"

Post by maikcat » Thu Feb 03, 2011 7:35 am

hi there,

>to check if the source (public) IP of the machine client connecting to it is the correct given one (I'd use dydns or similar ip to name services).

i you want to check your clients from which ips are connecting you can only see who is using what ip
if you use status directive inside server config file.

to filter them maybe using a script inside your configuration...

what exactly do you have in mind?

ps:if you want your clients to connect from static ips ,why dont you block them using a firewall?

ps2:if you use certificates you can easily block someone if he loses the certificate..

cheers,

michael
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

cmatte
OpenVpn Newbie
Posts: 15
Joined: Wed Feb 02, 2011 7:03 pm

Re: How to check if source IP of the client is "a given one"

Post by cmatte » Sat Feb 05, 2011 11:59 am

I was only based on the idea of checking if the correct client was connecting from a specific chosen location. I mean to be sure not to "risk" to have clients exchanging certs. Anyway if it's not a feature, I'll simply randomly check the status as you suggested to see if sources correspond. Thinking to the original idea again, it should be largely sufficient! Thanks for your help!!

Post Reply