Advertisement
Guest User

Untitled

a guest
May 25th, 2019
82
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.45 KB | None | 0 0
  1. systemctl restart NetworkManager.service
  2.  
  3.  
  4. cd /etc/openvpn && sudo openvpn - config "client1.ovpn"
  5.  
  6.  
  7.  
  8.  
  9. #!/bin/bash
  10. ###########################################
  11. # Created by Thomas Butz #
  12. # E-Mail: btom1990(at)googlemail.com #
  13. # Feel free to copy & share this script #
  14. ###########################################
  15.  
  16. # Adapt this value to your config!
  17. VPN_DST_PORT=3478
  18.  
  19. # Don't change anything beyond this point
  20. ###########################################
  21.  
  22. # Check for root priviliges
  23. if [[ $EUID -ne 0 ]]; then
  24. printf "Please run as root:\nsudo %s\n" "${0}"
  25. exit 1
  26. fi
  27.  
  28.  
  29. # Reset the ufw config
  30. ufw --force reset
  31.  
  32. # let all incoming traffic pass
  33. ufw default allow incoming
  34. # and block outgoing by default
  35. ufw default deny outgoing
  36.  
  37. # Every communiction via VPN is considered to be safe
  38. ufw allow out on tun0
  39.  
  40. # Don't block the creation of the VPN tunnel
  41. ufw allow out $VPN_DST_PORT
  42. # Don't block DNS queries
  43. ufw allow out 53
  44.  
  45. # Allow local IPv4 connections
  46. ufw allow out to 10.0.0.0/8
  47. ufw allow out to 172.16.0.0/12
  48. ufw allow out to 192.168.0.0/16
  49. # Allow IPv4 local multicasts
  50. ufw allow out to 224.0.0.0/24
  51. ufw allow out to 239.0.0.0/8
  52.  
  53. # Allow local IPv6 connections
  54. ufw allow out to fe80::/64
  55. # Allow IPv6 link-local multicasts
  56. ufw allow out to ff01::/16
  57. # Allow IPv6 site-local multicasts
  58. ufw allow out to ff02::/16
  59. ufw allow out to ff05::/16
  60.  
  61. systemctl start openvpn@client1.service
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement