Hot answers tagged

2

Your rules don't make sense for the scenario you've described. I'll accept that the CONNTRACK chain handles the VPN inbound packets, so your VPN will work. However, if you want VoIP to run over the VPN then you don't need any rules at all on red0 that handle SIP traffic. It looks like you want to accepting unregistered SIP calls in to your public IP ...


1

Your routing table shows that the VPN is set up to redirect all traffic through the VPN. This can cause issues in several ways: if you registered to the SIP service before starting the VPN, then once you start the VPN, the SIP traffic will appear to be coming from a different sender, as far as your SIP provider is concerned. To avoid this problem, make ...


1

The same openvpn process can't listen on UDP and TCP sockets at the same time. You have two good options: use two tap interfaces for openvpn. Have two openvpn server processes, one for each tap interface; one should listen on UDP, the other on TCP. Bridge these two tap interfaces on the server. use two tun interfaces. These can't be bridged, so if you ...



Only top voted, non community-wiki answers of a minimum length are eligible