Hot answers tagged

2

You will need both sets of rules within iptables. The two rulesets ensure that traffic leaving by the specified interfaces is appropriately masqueraded. Here is my suggestion, which is a little simpler than yours: # Masquerade outgoing traffic iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE # Allow ...


1

There's nothing particularly wrong with that setup. You'll use a PPTP client to connect to the VPN provider in Sweden, first. Then route all traffic across that connection. When it's working, launch the second VPN client —I believe you said it was OpenVPN? This will be easier to keep track of if you're using different VPN protocols, but not fundamentally ...


1

The handy tool is to list existing rules with line-numbers: iptables --line-numbers -t filter -L FORWARD You could delete the rules with -D option: iptables -t filter -D FORWARD 1 You could insert a new rule at specified location with -I option: iptables -t filter -I FORWARD 0 blah-blah-blah this would insert a new rule at the very beginning of a ...


1

Easy-rsa was bundled with OpenVPN 2.2.x and earlier. Since OpenVPN 2.3.x easy-rsa has to be separately installed from here or with a package manager. Location of easy-rsa up to OpenVPN 2.2.x: openvpn installed from rpm or deb: /usr/share/doc/packages/openvpn or /usr/share/doc/openvpn openvpn installed from a .tar.gz file: in the top level directory of the ...



Only top voted, non community-wiki answers of a minimum length are eligible