management 127.0.0.1 14
management-log-cache 50

port 1194
proto udp
dev tun0

ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
dh /tmp/openvpn/dh.pem
tls-auth /tmp/openvpn/ta.key 0
server 192.168.99.0 255.255.255.0
push „dhcp-option DNS 8.8.8.8“
push „dhcp-option DNS 8.8.4.4“
push „route 192.168.0.0 255.255.255.0“
max-clients 10
persist-key
persist-tun
script-security 2
keepalive 10 120
verb 5

• iptables -t nat -A POSTROUTING -s 192.168.99.0/24 -j MASQUERADE
• iptables -I INPUT 1 -p udp –dport 1194 -j ACCEPT
• iptables -I FORWARD 1 –source 192.168.99.0/24 -j ACCEPT
• iptables -I FORWARD -i br0 -o tun2 -j ACCEPT
• iptables -I FORWARD -i tun2 -o br0 -j ACCEPT
• iptables -I INPUT -i tun0 -j ACCEPT

management 127.0.0.1 14
management-log-cache 50

port 443
proto tcp
dev tun0

ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
dh /tmp/openvpn/dh.pem
tls-auth /tmp/openvpn/ta.key 0
server 192.168.99.0 255.255.255.0
push „dhcp-option DNS 8.8.8.8“
push „dhcp-option DNS 8.8.4.4“
push „route 192.168.0.0 255.255.255.0“
max-clients 10
persist-key
persist-tun
client-to-client
duplicate-cn
script-security 2
keepalive 10 120
verb 3

Kategorisiert in: Linux & Co

Dieser Artikel wurde verfasst von aziell