Openvpn tun forwarding with firewalld

firewalldopenvpn

I have an OpenVPN server on Fedora 19 with 2 clients – 1 client on the same LAN as the server, and the other on the internet.
I want the 2 clients to be able to talk to each other thru the tunnel and, if I stop firewalld.service on the server, they can.
How can I configure firewalld to allow this traffic? either with the GUI, or with firewall-cmd.
I think the equivalent iptables commands would be:

iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT

How to do that with firewalld?

Best Answer

I had the same issue, but this finally worked for me:

  • First, enable forwarding:

    echo 1 > /proc/sys/net/ipv4/ip_forward

  • And then authorize your tun0 interface with firewalld:

    firewall-cmd --zone=trusted --add-interface=tun0

Add --permanent to the last command to make it persistant.

I had nothing more to do except the usual OpenVPN configuration.

Related Topic