Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

If I don't want to use wireless encryption, but I still want security and I want to use sshuttle (on the clients, see: https://github.com/apenwarr/sshuttle/) for tunneling everything through an SSH tunnel then what could I do to prevent ANY traffic through the router? OpenWrt 10.04 Backfire.

So the wireless clients doesn't get ANY traffic until they OpenVPN'ed or SSH tunneled to the router.

So if someone sees the unencrypted wireless connection, and connects to it, then it couldn't surf the net, because it's blocked "somehow" (<- the question is this). And he can't even see the connected wireless clients, e.g.: with using (wifi-iface section):

option 'isolate' '1'

So it could only see that there is the router, e.g.: 192.168.1.1 and has only 1 open port sshd on e.g.: 55555.

In this way the "real" (valid) clients could be sure that they connect to the good router & and the traffic would be fully encrrypted?

share|improve this question
    
Your questions would be clearer if you stopped using "e.g." for everything. It doesn't mean what you seem to think it does and doesn't add clarity to your posts. Please use simple full sentences instead. –  Caleb Jul 17 '11 at 19:16
add comment

1 Answer

Sounds like a job for iptables. First allow whatever ports you use ssh and your vpn on, then block everything else. You will probably need to allow port 53 UDP for DNS as well unless you have some alternate setup for that.

share|improve this answer
    
don't you wanted to say only leave SSH+DHCP open? why is DNS needed when everything goes through the VPN? (even DNS) –  LanceBaynes Jul 17 '11 at 19:24
    
If you are creating the VPN by IP then routing DNS over it, that's fine, but connecting to VPN's by host name would require that DNS worked on the network without being tunneled. And yes if you are using DHCP you'll want that open too. –  Caleb Jul 17 '11 at 19:53
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.