Updated Pi hole OpenVPN server (markdown)

DL6ER 2017-01-08 14:44:58 +01:00
parent 4c7876dcda
commit 3e04b61070

@ -123,21 +123,22 @@ sudo iptables -A INPUT -p udp --destination-port 80 -j DROP
Your configuration should look like
<pre>
Chain INPUT (policy ACCEPT)
num target prot opt source destination
<b>1 ACCEPT tcp -- anywhere anywhere tcp dpt:domain
2 ACCEPT tcp -- anywhere anywhere tcp dpt:http
3 ACCEPT udp -- anywhere anywhere udp dpt:domain
4 ACCEPT udp -- anywhere anywhere udp dpt:http
5 DROP tcp -- anywhere anywhere tcp dpt:domain
6 DROP tcp -- anywhere anywhere tcp dpt:http
7 DROP udp -- anywhere anywhere udp dpt:domain
8 DROP udp -- anywhere anywhere udp dpt:http</b>
sudo iptables -L -v --line-numbers
Chain INPUT (policy ACCEPT 104 packets, 8691 bytes)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT tcp -- <b>tun0</b> any anywhere anywhere tcp dpt:domain
2 0 0 ACCEPT tcp -- <b>tun0</b> any anywhere anywhere tcp dpt:http
3 0 0 ACCEPT udp -- <b>tun0</b> any anywhere anywhere udp dpt:domain
4 0 0 ACCEPT udp -- <b>tun0</b> any anywhere anywhere udp dpt:http
5 0 0 DROP tcp -- <b>any</b> any anywhere anywhere tcp dpt:domain
6 0 0 DROP tcp -- <b>any</b> any anywhere anywhere tcp dpt:http
7 0 0 DROP udp -- <b>any</b> any anywhere anywhere udp dpt:domain
8 0 0 DROP udp -- <b>any</b> any anywhere anywhere udp dpt:http
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Chain OUTPUT (policy ACCEPT 83 packets, 11305 bytes)
num pkts bytes target prot opt in out source destination
</pre>
while there might be other rules in your table. Note that the order of the list entries matters!