{"id":48001,"date":"2010-11-01T14:05:15","date_gmt":"2010-11-01T06:05:15","guid":{"rendered":"\/2010\/11\/1\/openvpn_linux.html"},"modified":"2010-11-01T14:05:15","modified_gmt":"2010-11-01T06:05:15","slug":"openvpn_linux","status":"publish","type":"post","link":"https:\/\/blog.zhenglei.net\/?p=48001","title":{"rendered":"Linux Ubuntu OpenVPN configuration"},"content":{"rendered":"

Enable ip4 forward:<\/b>
nano \/etc\/sysctl.conf
net.ipv4.ip_forward = 1 <\/p>\n

Firewall configuration:<\/b>
sudo iptables -t nat -A POSTROUTING -s 10.168.127.0\/8 -j MASQUERADE
sudo iptables -A INPUT -i tun0 -j ACCEPT
sudo iptables -A FORWARD -i tun0 -j ACCEPT
sudo iptables -A FORWARD -o tun0 -j ACCEPT<\/p>\n

<\/p>\n

Save iptables:<\/b><\/p>\n

sudo su<\/p>\n

iptables-save -c > \/etc\/iptables.rules<\/p>\n

<\/p>\n

<\/p>\n

Config on Startup:<\/b><\/p>\n

Add two scripts in \/etc\/network\/:<\/p>\n

sudo nano \/etc\/network\/if-pre-up.d\/iptablesload:<\/tt><\/p>\n

#!\/bin\/sh
iptables-restore < \/etc\/iptables.rules
exit 0<\/i>


<\/pre>\n
sudo nano \/etc\/network\/if-post-down.d\/iptablessave:<\/tt><\/p>\n
#!\/bin\/sh
iptables-save -c > \/etc\/iptables.rules
if [ -f \/etc\/iptables.downrules ]; then
   iptables-restore < \/etc\/iptables.downrules
fi
exit 0<\/i><\/pre>\n
<\/p>\n
# sudo chmod +x \/etc\/network\/if-post-down.d\/iptablessave
# sudo chmod +x \/etc\/network\/if-pre-up.d\/iptablesload<\/pre>\n","protected":false},"excerpt":{"rendered":"
Linux configuration for Openvpn \u7ee7\u7eed\u9605\u8bfb →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[96],"class_list":["post-48001","post","type-post","status-publish","format-standard","hentry","category-internet","tag-vpn-openvpn-linux"],"_links":{"self":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/posts\/48001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=48001"}],"version-history":[{"count":0,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/posts\/48001\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=48001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=48001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=48001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}