Tutorial: Managing iptables Settings in Access Server⁠

Connect to the console and get root privileges.

Switch to the scripts directory:

cd /usr/local/openvpn_as/scripts/

Use the desired commands below:

• Change rule-prepending behavior to make Access Server append rules after existing ones (instead of prepending):

  ./sacli --key "iptables.append" --value "True" ConfigPut
  ./sacli start

• Restore the default behavior of prepending rules:

  ./sacli --key "iptables.append" ConfigDel
  ./sacli start

Connected to the console in the scripts directory, run the desired commands:

• Turn off iptables filter management:

  ./sacli --key "iptables.vpn.disable.filter" --value "True" ConfigPut
  ./sacli start

• Restore the default filter management:

  ./sacli --key "iptables.vpn.disable.filter" ConfigDel
  ./sacli start

• Turn off iptables NAT management:

  ./sacli --key "iptables.vpn.disable.nat" --value "True" ConfigPut
  ./sacli start

• Restore the default NAT management:

  ./sacli --key "iptables.vpn.disable.nat" ConfigDel
  ./sacli start

• Turn off iptables mangle management:

  ./sacli --key "iptables.vpn.disable.mangle" --value "True" ConfigPut
  ./sacli start

• Restore the default mangle management:

  ./sacli --key "iptables.vpn.disable.mangle" ConfigDel
  ./sacli start