Den torsdag 9.mar kl. 10:34 skrev Guy Dierx:
I do NOT what clients to see each other and I do NOT what clients
to be able to
connect to each other.
When I do NOT enable ";client-to-client" in the server config
clients can't see
each other. But is this setup script-kiddie proof? For example can a
script-kiddie client by adding extra entries in the client routing
connect to other clients? Do I need to put extra protection is
place to prevent
Yes they can. Use a firewall to prevent the openvpn server from routing
packets to and from the clients.
Openvpn-users mailing list