Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- *mangle
- :PREROUTING ACCEPT [1381:181833]
- :INPUT ACCEPT [1381:181833]
- :FORWARD ACCEPT [0:0]
- :OUTPUT ACCEPT [670:141877]
- :POSTROUTING ACCEPT [670:141877]
- -A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
- COMMIT
- *nat
- :PREROUTING ACCEPT [41:3498]
- :INPUT ACCEPT [41:3498]
- :OUTPUT ACCEPT [1:164]
- :POSTROUTING ACCEPT [1:164]
- -A POSTROUTING -s 10.8.0.0/24 -o eno1 -j MASQUERADE
- COMMIT
- *filter
- :INPUT ACCEPT [0:0]
- :FORWARD ACCEPT [0:0]
- :OUTPUT ACCEPT [16:3245]
- -A INPUT -p tcp -m tcp --dport 2288 -j ACCEPT
- -A INPUT -s 127.0.0.1/32 -p udp -m udp --dport 111 -j ACCEPT
- -A INPUT -p udp -m udp --dport 111 -j DROP
- -A INPUT -i tun0 -j ACCEPT
- -A INPUT -i lo -j ACCEPT
- -A INPUT -i tun0 -p tcp -m tcp --dport 1194 -j ACCEPT
- -A FORWARD -i eth0 -o tun0 -m state --state RELATED,ESTABLISHED -j ACCEPT
- -A FORWARD -s 10.8.0.0/24 -o eth0 -j ACCEPT
- -A FORWARD -i tun0 -j ACCEPT
- -A FORWARD -i eno0 -o tun+ -j ACCEPT
- -A FORWARD -i tun+ -o eno0 -j ACCEPT
- COMMIT
- port 1194
- proto udp
- dev tun
- ca ca.crt
- cert server.crt
- key server.key
- dh dh2048.pem
- server 10.8.0.0 255.255.255.0
- ifconfig-pool-persist ipp.txt
- push "redirect-gateway def1"
- push "dhcp-option DNS 8.8.8.8"
- push "dhcp-option DNS 8.8.4.4"
- keepalive 10 120
- cipher AES-256-CBC
- comp-lzo
- user nobody
- group nobody
- status openvpn-status.log
- verb 3
- client
- dev tun
- proto udp
- remote <server> 1194
- resolv-retry infinite
- nobind
- persist-key
- persist-tun
- comp-lzo
- verb 3
- ca ca.crt
- cert client.crt
- key client.key
- 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
- link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- inet 127.0.0.1/8 scope host lo
- valid_lft forever preferred_lft forever
- inet6 ::1/128 scope host
- valid_lft forever preferred_lft forever
- 2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
- link/ether 00:1e:c9:f8:e6:b4 brd ff:ff:ff:ff:ff:ff
- inet - brd - scope global eno1
- valid_lft forever preferred_lft forever
- inet6 2001:f40:0:1::f5:a/126 scope global
- valid_lft forever preferred_lft forever
- inet6 fe80::7a50:f43b:ba31:ab6/64 scope link
- valid_lft forever preferred_lft forever
- 3: eno2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN qlen 1000
- link/ether 00:1e:c9:f8:e6:b5 brd ff:ff:ff:ff:ff:ff
- 4: enp7s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
- link/ether 00:15:17:8f:f3:09 brd ff:ff:ff:ff:ff:ff
- 6: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN qlen 1000
- link/ether 52:54:00:a9:e6:9d brd ff:ff:ff:ff:ff:ff
- inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
- valid_lft forever preferred_lft forever
- 7: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
- link/ether 52:54:00:a9:e6:9d brd ff:ff:ff:ff:ff:ff
- 8: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
- link/none
- inet 10.8.0.1 peer 10.8.0.2/32 scope global tun0
- valid_lft forever preferred_lft forever
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement