Coming soon - Get a detailed view of why an account is flagged as spam!
view details

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

2
iptables: port forwarding through VPN tunnel and INPUT chain
Post Body

I am forwarding a range of ports to a peer of a OpenVPN tunnel:

-t nat -A PREROUTING -i eth0 -p tcp --dport <start>:<end> -j DNAT --to-destination <peer-IP>

I want to filter the packets that get forwarded this way to prevent DDoS. I have implemented some rules in the mangle table and some of those rules are appended to the INPUT chain.

Question: will the INPUT chain rules apply to these packets because they're handed to the OpenVPN service or will they not be applied since they're not targeted at the host?

Author
Account Strength
100%
Account Age
12 years
Verified Email
Yes
Verified Flair
No
Total Karma
47,033
Link Karma
3,471
Comment Karma
42,875
Profile updated: 3 days ago
Posts updated: 1 day ago

Subreddit

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.
Posted
3 years ago