How use iptables to block access to local LAN for an openvpn client?

Bo Berglund bo.berglund at gmail.com
Thu Sep 1 22:51:40 UTC 2022


On Thu, 01 Sep 2022 08:57:34 +0200, Bo Berglund <bo.berglund at gmail.com> wrote:

>Will something like this work:
>
>iptables -A PREROUTING -s 10.8.113.139 -d 192.168.223.0/24 -j DROP
>
>I am not very fluent in iptables usage, so I need some help in the correct
>syntax of the command to create the filter...
>

SOLVED!

This did not work, the PREROUTING verb does not exist.

But this did work, so my issue is resolved and I can mix local access clients
with web only access clients based on the ccd entry for their IP address:

iptables -A FORWARD -s 10.8.113.136/29 -d 192.168.223.0/24 -j DROP


-- 
Bo Berglund
Developer in Sweden





More information about the ubuntu-users mailing list