OpenVPN Support Forum

Hello, i have Openvpn server to allow access to my network to a couple of people, but i want to prevent that this access will be use for P2P traffic. how can i configure the openvpn server to block P2P

Thank you

hi there,

blocking traffic is not openvpn job to do so...
you can use iptables to drop traffic based on source/dest-protocol combinations..

cheers,

Michael.

Try setup suricata IDS/IPS on the server and get snort P2P rules. It works fine.

http://www.openinfosecfoundation.org/

nhu wrote:how can i configure the openvpn server to block P2P

Completely blocking P2P might be achieved by only allowing for TCP 443 (https), TCP 80 (http), and UDP 53 (dns) to forward out of the server, whilst blocking all other ports. A more flexible and reasonable approach will be this though:



Source: https://blog.torproject.org/running-exit-node

Bebop wrote:

nhu wrote:how can i configure the openvpn server to block P2P

Completely blocking P2P might be achieved by only allowing for TCP 443 (https), TCP 80 (http), and UDP 53 (dns) to forward out of the server, whilst blocking all other ports. A more flexible and reasonable approach will be this though:



Source: https://blog.torproject.org/running-exit-node

Hi,

I'm newbie do you have any reference how can I only allow the 80, 443, and 53 ports?

Thanks

this is not an OpenVPN question but a firewalling/routing question. On Linux you'd use iptables for this.