// client // client dev tun proto udp remote IP  1194 nobind persist-key persist-tun comp-lzo log-append openvpn-log verb 3 mute 10 // Server // proto udp dev tun port 1194 server 10.100.200.0 255.255.255.0 push “route 192.168.3.0 255.255.255.0” client-config-dir ccd client-to-client ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log 20 log-append openvpn-log verb 3 …

Continue reading ‘openvpn client/server conf + iptables forward’ »

*filter :INPUT DROP [0:0] :FORWARD ACCEPT [0:0] :OUTPUT DROP [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -p icmp -m icmp –icmp-type any -j ACCEPT -A INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -d 192.168.2.2/32 -p udp -m multiport –dports 88,750 -j ACCEPT -A OUTPUT -d 192.168.2.2/32 -p tcp -m multiport –dports …

Continue reading ‘Simple Iptables’ »

Bond with bridge auto eth0 iface eth0 inet manual auto eth1 iface eth1 inet manual auto bond0 iface bond0 inet manual slaves eth0 eth1 bond_miimon 100 bond_mode balance-tlb auto vmbr0 iface vmbr0 inet static address 192.168.xxx.xxx netmask 255.255.255.xxx gateway 192.168.xxx.xxx bridge_ports bond0 bridge_fd 0 ###bridge_vlan_aware yes Bridge auto eth1 iface eth1 inet manual up ip …

Continue reading ‘Bond Bridge interfaces. #debian’ »