search

freifunk / meshkit-firmware

Openwrt Imagebuilding for Usage with Freifunk Meshkit
http://meshkit.freifunk.net
5 stars 2 forks source link

VPN should be established only via WAN #24

Open FreifunkUFO opened 9 years ago

FreifunkUFO commented 9 years ago

a firewall rule would be nice to avaoid establishing (openvpn/haupt-)VPN via mesh (f.i. when internet-gateway fails or WAN-cable is unplugged)

FreifunkUFO commented 9 years ago

something like this (on cronjob?)

root@99-54:~# iptables -I OUTPUT -d vpnd.leipzig.freifunk.net -p tcp --dport 5000 -o wlan0 -j DROP root@99-54:~# iptables -I OUTPUT -d vpn8.leipzig.freifunk.net -p tcp --dport 5000 -o wlan0 -j DROP root@99-54:~# iptables -I OUTPUT -d vpn8.leipzig.freifunk.net -p tcp --dport 5000 -o wlan1 -j DROP root@99-54:~# iptables -I OUTPUT -d vpnd.leipzig.freifunk.net -p tcp --dport 5000 -o wlan1 -j DROP

mmunz commented 8 years ago

valid for leipzig firmware only

FreifunkUFO commented 8 years ago

betrifft alle olsr-freifunker, die olsr auch über vpn-tunnel sprechen..