[Techtalk] iptables rules for openvpn review, please

[Carla Schroder]

On Tuesday 27 February 2007 16:14, John Clarke wrote:

>  Maybe I'm paranoid, but I'd restrict what the
> remote end of the vpn is allowed to do.

Like what? I'm treating it as an extension of the local network, so what would 
you restrict?

>
> If you want, I'll share the rules I use for my openvpn server and
> clients, or if you have any particular filtering in mind, let me know
> and I'll generate a suitable set of rules for you.

I'm trying to work up a basic set of rules to get VPN traffic through NAT. 
Nothing fancy, just make the dommed thing work. :) So any examples are 
appreciated.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Carla Schroder
Linux geek and random computer tamer
check out my Linux Cookbook! 
http://www.oreilly.com/catalog/linuxckbk/
best book for sysadmins and power users
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~