Pi-hole/pivpn
Pi-hole/pivpn
1
0
Fork 0
mirror of https://github.com/pivpn/pivpn.git synced 2024-12-20 11:50:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

added info on how to prevent clients to access internet.

Carlos Colaço 2018-01-17 19:20:04 +00:00
parent 0160c53db6
commit f06af1b5ed
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
FAQ.md

@ -15,4 +15,12 @@ You will need a dynamic DNS service and a hostname. If your IP address changes,
You can safely install pivpn on the same raspberry pi as your pi-hole install. If you point your openvpn clients to the IP of your pi-hole for DNS (so they get ad blocking etc) then you will want to be sure to edit your /etc/dnsmasq.conf file too allow dns resolution from the vpn interface. You can safely install pivpn on the same raspberry pi as your pi-hole install. If you point your openvpn clients to the IP of your pi-hole for DNS (so they get ad blocking etc) then you will want to be sure to edit your /etc/dnsmasq.conf file too allow dns resolution from the vpn interface.
look for this line: `listen-address=127.0.0.1, 192.168.1.2, 10.8.0.1` look for this line: `listen-address=127.0.0.1, 192.168.1.2, 10.8.0.1`
Note your listen-address may just contain 127.0.0.1, the next IP should be the local IP of your pi-hole and the final IP, 10.8.0.1 is the PiVPN vpn interface. Note your listen-address may just contain 127.0.0.1, the next IP should be the local IP of your pi-hole and the final IP, 10.8.0.1 is the PiVPN vpn interface.
If you set this and have your vpn clients use 192.168.1.2 (in my example) as their DNS then you will get ad blocking over your VPN connections. If you set this and have your vpn clients use 192.168.1.2 (in my example) as their DNS then you will get ad blocking over your VPN connections.
## Allow Clients to connect but block their access to the internet
If you don't want your VPN clients to be able to access the internet simply comment the following line in `/etc/openvpn/server.con`
````
push "redirect-gateway def1"
```