LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-20-2017, 10:24 AM   #1
riahc3
Member
 
Registered: Dec 2002
Posts: 222

Rep: Reputation: 1
Use firewall to block communication between networks inside a tunnel?


I have a VPN tunnel 10.10.10.0 255.255.255.0 and inside I have networks such as 172.16.1.0 255.255.255.0 172.16.2. 0 255.255.255.0 172.16.3.0 255.255.255.0 ....etc (you get the picture)

How, with the Ubuntu server providing the 10.10.10.0 tunnel do I block those internal networks from communicating with each other? I imagine with iptables but what would be command?

Thank you
 
Old 09-20-2017, 03:10 PM   #2
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
You only cross networks at the router. Ubuntu is only providing the access to get across.
 
Old 09-20-2017, 04:03 PM   #3
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,886

Rep: Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615Reputation: 3615
Did I see this question already?
 
Old 09-20-2017, 04:31 PM   #4
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Yeah, it's in Networking also.
 
Old 09-20-2017, 05:07 PM   #5
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,555
Blog Entries: 4

Rep: Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888Reputation: 3888
OpenVPN has the capability to control client-to-client access, and to stipulate which subnets (if any) can talk to one another. You do not have to use firewall software to do this.
 
Old 09-20-2017, 06:14 PM   #6
riahc3
Member
 
Registered: Dec 2002
Posts: 222

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by lazydog View Post
You only cross networks at the router. Ubuntu is only providing the access to get across.
Ubuntu, in this case, is acting as a router as well. So it should be able to block this AFAIK.

Quote:
Originally Posted by sundialsvcs View Post
OpenVPN has the capability to control client-to-client access, and to stipulate which subnets (if any) can talk to one another. You do not have to use firewall software to do this.
Sure this is true also when it is acting as a router?
 
Old 09-20-2017, 09:07 PM   #7
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Quote:
Originally Posted by riahc3 View Post
Ubuntu, in this case, is acting as a router as well. So it should be able to block this AFAIK.
You are using the same networks on both sides of the tunnel?
 
Old 09-21-2017, 02:05 AM   #8
riahc3
Member
 
Registered: Dec 2002
Posts: 222

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by lazydog View Post
You are using the same networks on both sides of the tunnel?

Technically since it is a tunnel, its all the same network.

But the LANs are not the same.
 
Old 09-21-2017, 07:35 AM   #9
rtmistler
Moderator
 
Registered: Mar 2011
Location: USA
Distribution: MINT Debian, Angstrom, SUSE, Ubuntu, Debian
Posts: 9,875
Blog Entries: 13

Rep: Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929Reputation: 4929
Quote:
Originally Posted by jefro View Post
Did I see this question already?
Quote:
Originally Posted by lazydog View Post
Yeah, it's in Networking also.
Yes however this copy of the question has received most of the replies. I'm moving this thread to Networking and have asked the Networking moderator to close the duplicate.

@riahc3: Please post questions in only one forum.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Firewall on Xen host, block to internal networks but open out pingu Linux - Security 6 06-21-2013 11:18 AM
LXer: The Devil Inside: Creative Threat Detection Inside the Firewall LXer Syndicated Linux News 0 05-24-2012 08:30 PM
pptp gets modem hung up outside firewall, but not inside firewall cmnorton Linux - Networking 4 11-27-2008 01:04 AM
packet loss inside GRE tunnel mw1j29353 Linux - Networking 1 12-22-2007 05:23 AM
Help! Serial Communication Port programming in Assembly(Partial code inside) laksi Programming 4 10-12-2004 02:38 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 05:21 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration