On 21.09.23 21:50, Jason Long via Openvpn-users wrote:
Hello,I have two questions:1- When someone connects to an OpenVPN server, is it possible to be redirected to duckduckgo.com when trying to go to google.com? 2- How can I block access to certain websites? Does OpenVPN offer such features?
You can manipulate traffic that *does* go through the VPN and, thus, your server(s) in whatever way *other* soft- and hardware allows you to. OpenVPN itself does not have any such functionality.
Relevant sidenotes:a) There are OpenVPN(-protocol) clients that allow the user to override the routes the OpenVPN(-software) server sends it, not to mention adding routes with more specific prefixes pointing to selected servers (e.g., Google's), and also any DNS manipulation can be countered by way of /etc/hosts, so users can trivially circumvent your blocks (as long as they're willing to have the traffic *not* go through your VPN).
b) As of right now, Google.com's servers have IPv6 addresses, which will be preferred in a dual stack setup, so you'll have to add IPv6 to your VPN to even stand a chance of intercepting those users' connections to Google.
c) As of right now, DuckDuckGo.com does *not* have IPv6 addresses, so be prepared to run a 6-to-4 gateway as well ...
Kind regards, -- Jochen Bern Systemingenieur Binect GmbH
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
