[ufw] force all traffic through VPN


 
Thread Tools Search this Thread
Top Forums UNIX for Beginners Questions & Answers [ufw] force all traffic through VPN
# 1  
Old 03-17-2019
[ufw] force all traffic through VPN

I am trying to force all my tun0's traffic through VPN but some some reason, the ufw is not working the way I want to.

Below are the commands that I have executed.. I am able to connect to my SSH and NFS server but for some reason that I am unable to understand, I am unable to surf the net.
What am I missing?

Code:
sudo echo "y" ufw reset
sudo ufw logging off
sudo ufw default deny incoming
sudo ufw default deny outgoing

#Force all VPN traffic to tun0
sudo ufw allow out on tun0 from any to any

#SSH
sudo ufw allow out on enp6s0 to ssh_ip_server port XX proto tcp

#NFS
sudo ufw allow out on enp6s0 to nfs_server_ip port xxx
sudo ufw allow out on enp6s0 to nfs_server_ip port xxx
sudo ufw allow out on enp6s0 to nfs_server_ip port xxx

sudo ufw enable

Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Linux

Linux keeps freezing on UFW BLOCK

Hi everyone, I have had trouble getting several versions of Linux stable on my machine over the last few months. I do not think the issue is with the machine. Windows ran fine on it for a long time. The current issue is that whenever I lock the screen then come back after a long time I find... (2 Replies)
Discussion started by: mojoman
2 Replies

2. Solaris

Vpn

Hi. Yesterday I installed Solaris 11.3 and I tried to setup a VPN but I didn't find how to make it. I saw the "network manager" where I found the ethernet connection but I didn't find where to add a VPN connection. When I used Debian Linux there was NetworkManagerVPN that with a GUI I... (0 Replies)
Discussion started by: Jena
0 Replies

3. Ubuntu

ubuntu kernel: [ 729.529501] [UFW ALLOW] ,[UFW AUDIT]

Hi , In our ubuntu server 10.10 ,we are getting below logs .Every day i need to restart server ,other wise it will not accessible.Some times ,i need to restart two times. When i ping google.com ,it was very slow .some times host not reachable .After reboot ,it will ping as good. ... (0 Replies)
Discussion started by: srinivasa
0 Replies

4. UNIX for Dummies Questions & Answers

Ubuntu 9.10 FIrewall--is UFW allowing anything through by default?

Hi, I have enabled my UBUNTU 9.10 ufw. By default does it let anything through? I would think it allows all outbound originating requests through and allows for their return but it does not allow any inbound requests. Is this how it works? ---------- Post updated at 08:17 PM ----------... (1 Reply)
Discussion started by: mojoman
1 Replies

5. UNIX for Dummies Questions & Answers

UFW show args command

In ubuntu man page there is this command. What are values of ARGS I can use? (0 Replies)
Discussion started by: mojoman
0 Replies

6. HP-UX

how to force umount

sorry, wrong section, mod please close thread (0 Replies)
Discussion started by: robertngo
0 Replies

7. UNIX for Advanced & Expert Users

VPN and then

Hi, I want to work on a remote unix server, then on a windows XP station I have a Forticlient that makes a VPN to the network on which the server is situated. But then I do not know how to work with. In DOS box (cmd BOX) I issue: telnet myserver but It does not know IT. Any idea ? Many thanks. (2 Replies)
Discussion started by: big123456
2 Replies

8. IP Networking

Vpn

Hi, I have two unix networks connected via VPN via IPsec. I am using snapgear vpn devices at each location. The two devices can ping one another, as well as the unix network behind the respected devices. The unix machines can ping their local vpn devices. However, I am having issues pinging... (1 Reply)
Discussion started by: l8kerboi23
1 Replies

9. UNIX for Dummies Questions & Answers

help with vpn

We have an older model DG Aviion Unix system and we're trying to switch to VPN but we can't talk to the Unix box... can't ping or telnet to it, but we can talk to all our other systems (PC/NT servers). Is there a network/tcpip setting we're missing? Something we have to change/set, either on... (0 Replies)
Discussion started by: markb
0 Replies
Login or Register to Ask a Question
GNUNET-VPN(1)						      General Commands Manual						     GNUNET-VPN(1)

NAME
gnunet-vpn - manually setup a GNUnet VPN tunnel SYNOPSIS
gnunet-vpn [options] DESCRIPTION
gnunet-vpn can be used to manually setup a VPN tunnel via the GNUnet network. There are two main types of tunnels. Tunnels to an exit node which routes the traffic to the global Internet, and tunnels to a node that runs a service only within GNUnet. Depending on the type of tunnel, gnunet-vpn takes different options. The "-i" option is required for tunnels to an exit node, whereas the "-p" and "-s" options in conjunction with either "-u" or "-t" are required for tunnels to services. For exit tunnels, both UDP and TCP traffic will be redi- rected. For service tunnels, either UDP ("-u") or TCP ("-t") traffic will be redirected. The tool will display the IP address for this end of the tunnel. The address can be displayed as soon as it has been allocated, or only after ("-a") the tunnel has been created. OPTIONS
-4, --ipv4 Desired IP address on this end of the tunnel should be an IPv4 address. -6, --ipv6 Desired IP address on this end of the tunnel should be an IPv6 address. -a, --after-connect Display IP address only after the tunnel is fully connected. -c FILENAME, --config=FILENAME Use the configuration file FILENAME. -d SEC, --duration SEC The mapping should be established for SEC seconds. Default is 5 minutes. -h, --help Print short help on options. -i IP, --ip IP Tunnel should be to an exit node and connect to the given IPv4 or IPv6 IP address. Note that you can specify an IPv6 address as the target here, even in combination with "-4" (4to6) and similarly you can specify an IPv4 address in combination with "-6" (6to4). -L LOGLEVEL, --loglevel=LOGLEVEL Use LOGLEVEL for logging. Valid values are DEBUG, INFO, WARNING and ERROR. -p PEERID, --peer=PEERID Name of the peer offering the service to connect to. Cannot be used in conjunction with "-i", requires "-s". -s NAME, --service=NAME Name of the service running on the target peer. Cannot be used in conjunction with "-i", requires "-p". -t, --tcp Service runs TCP. Either "-t" or "-u" must be specified when using "-s". -u, --udp Service runs UDP. Either "-t" or "-u" must be specified when using "-s". -V, --verbose Be verbose. -v, --version Print GNUnet version number. BUGS
Report bugs by using Mantis <https://gnunet.org/bugs/> or by sending electronic mail to <gnunet-developers@gnu.org> SEE ALSO
gnunet-setup(1) GNUnet 25 Feb 2012 GNUNET-VPN(1)