From 913af811630ca395e8cd51c8de539643731f7089 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lauri=20V=C3=B5sandi?= Date: Wed, 2 Jun 2021 18:55:38 +0000 Subject: [PATCH] Fix OpenVPN interface names for iptables --- pinecrypt/server/cli.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pinecrypt/server/cli.py b/pinecrypt/server/cli.py index b027388..7086931 100644 --- a/pinecrypt/server/cli.py +++ b/pinecrypt/server/cli.py @@ -252,8 +252,8 @@ def pinecone_provision(): yield "-A INPUT -j INBOUND_BLOCKED" yield ":FORWARD DROP [0:0]" - yield "-A FORWARD -i tunudp0 -j INBOUND_CLIENT -m comment --comment \"Inbound traffic from OpenVPN UDP clients\"" - yield "-A FORWARD -i tuntcp0 -j INBOUND_CLIENT -m comment --comment \"Inbound traffic from OpenVPN TCP clients\"" + yield "-A FORWARD -i tun0 -j INBOUND_CLIENT -m comment --comment \"Inbound traffic from OpenVPN UDP clients\"" + yield "-A FORWARD -i tun1 -j INBOUND_CLIENT -m comment --comment \"Inbound traffic from OpenVPN TCP clients\"" yield "-A FORWARD -m policy --dir in --pol ipsec -j INBOUND_CLIENT -m comment --comment \"Inbound traffic from IPSec clients\"" yield "-A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j OUTBOUND_CLIENT -m comment --comment \"Outbound traffic to clients\"" yield "-A FORWARD -j %s -m comment --comment \"Default policy\"" % default_policy