ccdoggy

####Server config####

mode server
tls-server
port 1194
proto tcp-server
dev tap1

dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

server-bridge 192.168.10.0 255.255.255.0 192.168.10.45 192.168.10.55
#192.168.10.0 is my home network number, 192.168.10.45 .55 is the beginning and end of the IPs it will give out to VPN clients#

client-to-client

keepalive 15 60

comp-lzo
persist-key
persist-tun
verb 3

tcp-nodelay


#####Server firewall#####

iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

iptables -I INPUT 1 -p tcp --dport 1194 -j ACCEPT
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT


####Router startup####

openvpn --mktun --dev tap1
brctl addif br0 tap1
ifconfig tap1 0.0.0.0 promisc up

####Client config####

remote IP-or-DNS-name-here 1194

tls-client
dev tap
proto tcp-client
port 1194
resolv-retry infinite
nobind
persist-key
persist-tun

ns-cert-type server

comp-lzo
verb 3

ca ca.crt
cert certname.crt
key keyname.key

# This directs all traffic over the VPN
#redirect-gateway def1