Merge pull request dperson#249 from doug-w/master

Do not forward VPN ports from the tunnel only to the tunnel
canhminh · Apr 12, 2020 · 5fad6c5 · 5fad6c5
2 parents fa29c2a + 01e543c
commit 5fad6c5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/openvpn.sh b/openvpn.sh
@@ -197,10 +197,10 @@ vpnportforward() { local port="$1" protocol="${2:-tcp}"
                 2>/dev/null
     ip6tables -A FORWARD -p $protocol -m $protocol --dport $port -j ACCEPT \
                 2>/dev/null
-    iptables -t nat -A OUTPUT -p $protocol --dport $port -j DNAT \
+    iptables -t nat -A OUTPUT -i tun0 -p $protocol --dport $port -j DNAT \
                 --to-destination 127.0.0.11:$port
     iptables -A INPUT -p $protocol -m $protocol --dport $port -j ACCEPT
-    iptables -A FORWARD -p $protocol -m $protocol --dport $port -j ACCEPT
+    iptables -A FORWARD -i tun0 -p $protocol -m $protocol --dport $port -j ACCEPT
     echo "Setup forwarded port: $port $protocol"
 }