I have a dedicated openvpn FC4 box with a public IP. I connect to it fine and all that, everything works, etc, etc, Have not been hacked which surprises me, so I must of done something right. Basically most everything works, except for some reason, some ports are blocked when on the VPN. For instance I can not connect to IRC servers, 6888, while connected on the VPN.
/etc/shorewall/policy $FW net ACCEPT road $FW ACCEPT road net ACCEPT $FW road ACCEPT net $FW DROP info net all DROP info /etc/shorewall/rules Web/ACCEPT net $FW DROP $FW net icmp /usr/share/shorewall/macro.Web PARAM - - TCP 1593 # TCP Webmin (plaintext) PARAM - - TCP 22 # PARAM - - TCP 9999 # PARAM - - TCP 421 # PARAM - - TCP 422 # PARAM - - TCP 446 # PARAM - - TCP 443 # PARAM - - TCP 65001 # PARAM - - TCP 65002 # PARAM - - TCP 65003 # PARAM - - TCP 65004 # PARAM - - TCP 65005 # PARAM - - TCP 65006 # (I need to change most of the above to accessable via VPN clients ONLY, but not sure how) I want the VPN users to be able to use any port they want to use, this may be wrong list to ask it on, but I was thinking since shorewall is my firewall, yall would know. I only need a few ports open that i make the VPN use (80, 443 TCP) and then the rest I will close, but i want the VPN users to be able to use any port they want to. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
