On 1/12/2016 4:42 AM, Gert Doering wrote: > Hi, > > On Tue, Jan 12, 2016 at 01:41:09PM +0100, David Sommerseth wrote: >>> In the FORWARD chain, the easiest approach - and reasonably secure, >>> unless you distrust your VPN clients - is to permit everything >>> coming in via tun0 >>> >>> iptables -I INPUT -i tun0 -j FORWARD >>> >>> (or similar to this, typing from memory) >> I presume Gert meant: >> >> iptables -I FORWARD -i tun0 -j ACCEPT > Right. Should drink more coffee before posting in the morning. > > thanks, > > gert > Thanks for everyone that gave me assistance in resolving this issue. I have posted the full details of my analysis and the implementation of my solution over at the Forum where I made my original post. https://forums.openvpn.net/topic20369.html I hope my description helps someone else resolve their issues. Thanks again.
Jeff -- Jeff Boyce Meridian Environmental www.meridianenv.com ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140 _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users