Part 2 of the TrueNAS OpenVPN Server. We look at how to limit access to the VPN servers Subnet / Network, Allow Internet access through the VPN and Limit subnet access, and how we can Block compromised certificates from accessing the OpenVPN server!https://youtu.be/it0HdDiutIE
Block VPN Server Subnet Access:
- ipfw add 997 allow ip from [VPN Client Network] to [TrueNas SMBShare IP] dst-port 445
- ipfw add 998 allow ip from [VPN Client Network] to [TrueNas Subnet Gateway IP]
- ipfw add 999 deny ip from [VPN Client Network] to [TrueNas Subnet/Mask]
Revoke / Block Certificate Access:
- client-config-dir /etc/certificates/
- ccd-exclusive
