From bb90567abb5f64588eb1acca68fbb61f8e509e5b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jos=C3=A9=20Antonio=20Y=C3=A1=C3=B1ez=20Jim=C3=A9nez?= Date: Wed, 25 May 2022 23:19:14 +0000 Subject: [PATCH] docs: update vpn/openvpn/servidor --- vpn/openvpn/servidor.md | 20 +++++++++++--------- 1 file changed, 11 insertions(+), 9 deletions(-) diff --git a/vpn/openvpn/servidor.md b/vpn/openvpn/servidor.md index 84de070..7e6b15b 100644 --- a/vpn/openvpn/servidor.md +++ b/vpn/openvpn/servidor.md @@ -2,7 +2,7 @@ title: OpenVPN - Servidor description: Tutorial de instalación del Servidor OpenVPN published: true -date: 2022-05-25T23:02:41.280Z +date: 2022-05-25T23:19:11.192Z tags: vpn, servidor, debian editor: markdown dateCreated: 2022-05-18T16:48:57.246Z @@ -645,31 +645,33 @@ chmod 700 ~/client-configs/make_config.sh cd ~/client-configs sudo ./make_config.sh client1 +sudo ./make_config.sh client2 +sudo ./make_config.sh client3 ``` -* El fichero resultante, `bastionado-client1.ovpn` deberá entregarse al cliente para que éste pueda conectar a la VPN. +* Los fichero resultantes, `bastionado-client{1,2,3}.ovpn` deberán entregarse a los clientes para que éstos puedan conectar a la VPN. ## Habilitando el forwarding en nftables +```bash +sudo vim /etc/nftables.conf +``` + ```bash #!/usr/sbin/nft -f flush ruleset -define vpn_port=1194 +define vpn_port=6174 define vpn_if=tun0 define outside_if=enp0s17 -define vpn_subnet=10.8.0.0/24 +define vpn_subnet=10.10.10.0/24 table inet filter { chain input { - # allow generic VPN connections to the Server + # allow OpenVPN VPN connections to the Server udp dport $vpn_port accept - - # allow OpenVPN - # udp dport 1194 accept - } chain forward {