If you need a firewall, just use good 'ol iptables or a package called Shorewall, both deliver good results. I am not a fan of UFW, as I found it to be counter-productive.

Here's a good generator for iptables rules:

http://www.mista.nu/iptables/

What I do is drop these into a script and call it at startup.

Stephen

K1LNX

On Fri, Aug 5, 2016 at 3:34 PM, Tom Hayward <tom@tomh.us> wrote:

On Fri, Aug 5, 2016 at 11:58 AM, Tom Hayward <tom@tomh.us> wrote:
> On Fri, Aug 5, 2016 at 11:50 AM, Steve Agee <n5zua@earthlink.net> wrote:
>> Has anyone made any notes or videos on how to install and configure both
>> ends of OpenVPN, or is it "so easy, even an idiot can do it"?
>>
>> N5ZUA
>
> I'm working through this tutorial now:
> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04
>
> DigitalOcean usually has quality, generic tutorials for things like
> this. So far, all of the commands and package names have been 100%
> compatible with DIAL.

Okay, not completely true. I ignored the whole section on ufw, because
DIAL doesn't have ufw. Also, when you get to the point of starting the
service, rather than service openvpn start, the command on DIAL is:

systemctl start openvpn@server.service

This assumes your config file is /etc/openvpn/server.conf. For
/etc/openvpn/xxx.conf, you would do systemctl start
openvpn@xxx.service.

Tom KD7LXL
_______________________________________________
App_rpt-users mailing list
App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.