Changes between Initial Version and Version 3 of Ticket #1312


Ignore:
Timestamp:
08/09/20 01:42:27 (4 years ago)
Author:
tct
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #1312

    • Property Priority changed from major to minor
    • Property Cc tct added

  • Ticket #1312 – Description

    initial v3  
    3030- If `--enable-pf` then DROP all data channel packets.
    3131- If `--server-(ipv6)` then ALLOW server(v6) host IP.
    32 - If `--server-(ipv6)` & `--client-to-client` then ALLOW server(v6) CIDR.
     32- If `--server-(ipv6)` & `--client-to-client` then ALLOW server(v6) CIDR (See note 5).
    3333- If `push "route(-ipv6)"` then ALLOW route(v6) CIDR.
    3434- If `--server(-ipv6)` & `push "redirect-gateway-(ipv6)` then ALLOW ALL (Disable client PF).
    … …  
    4747
    4848Note 4: If the client redirects their own gateway then the prior server rules will have priority.
     49
     50Note 5: Having enabled `--client-to-client`, this is the one place where an OpenVPN PF has value. Who can see who ?