iptables rules that block non-VPN traffic

[dragon2fly]

iptables rules that block non-VPN traffic

[Dragon2fly]

@siriusrh I'll integrate it into the next version

[evadogstar]

@siriusrh @Dragon2fly Do not break things, please! Not default setup please :)

I archive this with special user group that added to the system, then I run my own start script with sudo sg qvpn -c "python vpnproxy_cli.py $arg" and only vpngate-with-proxy can send traffic. Of course on system start up there are commands to DROP all incomind and outgoing connections eg. iptables -I FORWARD -o eth0 -j DROP and command to allow traffic only for qvpn group iptables -I OUTPUT -p all -o eth0 -m owner --gid-owner qvpn -j ACCEPT