From a9ae590f6f83989dcae9ee6418761a4da74ceba1 Mon Sep 17 00:00:00 2001 From: john-david-r-smith Date: Thu, 26 May 2016 08:42:25 +0200 Subject: [PATCH] removed unnecessary + dangerous iptables rule --- configuration/vpn.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/configuration/vpn.md b/configuration/vpn.md index 5711f936..9926df9a 100644 --- a/configuration/vpn.md +++ b/configuration/vpn.md @@ -111,10 +111,6 @@ You need an openvpn server and a DNS server accessible through the vpn (use one `iptables -I FORWARD -o eth0 -j DROP` `iptables -I FORWARD -i eth0 -j DROP` This blocks forwarding of connections through your plain network device (in case the vpn tunnel breaks). - - `iptables -I FORWARD -o $DEV -j ACCEPT` - This allows forwarding of connections through the vpn. (So other AppVMs can use it) - `iptables -t nat -I PR-QBS -p udp --dport 53 -j DNAT --to-destination $DNS` `iptables -t nat -I PR-QBS -p tcp --dport 53 -j DNAT --to-destination $DNS`