> did you configure tunnelblick to send *all* traffic to the vpn? if so, you > have to add allow rules to the openvpn interface to permit that traffic, > and probably set up a NAT on there as well.
If the network the client is connecting from (e.g. while travelling) is in any way not totally trustworthy it would be prudent to at least route the DNS traffic through the tunnel, if not all traffic. The VPN should protect from all MITM attacks and snooping between the VPN client and server. Volker -- Volker Kuhlmann is list0570 with the domain in header. http://volker.top.geek.nz/ Please do not CC list postings to me. _______________________________________________ List mailing list [email protected] https://lists.pfsense.org/mailman/listinfo/list
