Skip to content

Commit f3b7be6

Browse files
committed
Allowed ICMP ping request to OpenVPN server
1 parent 83df3c9 commit f3b7be6

File tree

2 files changed

+6
-0
lines changed

2 files changed

+6
-0
lines changed

root/defaults/example/config/basic_nat/hooks/init/10-network.sh

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,8 @@ ovpn-iptables -P INPUT DROP
1515
# Allow established connection
1616
ovpn-iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -m comment --comment "Accept traffic from established connections"
1717

18+
# Allow ICMP ping request
19+
ovpn-iptables -A INPUT -p icmp --icmp-type 8 -j ACCEPT
20+
1821
# Drop all forwarded traffic
1922
ovpn-iptables -P FORWARD DROP

root/defaults/example/config/basic_nat_wlp/hooks/init/10-network.sh

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,8 @@ ovpn-iptables -P INPUT DROP
1515
# Allow established connection
1616
ovpn-iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -m comment --comment "Accept traffic from established connections"
1717

18+
# Allow ICMP ping request
19+
ovpn-iptables -A INPUT -p icmp --icmp-type 8 -j ACCEPT
20+
1821
# Drop all forwarded traffic
1922
ovpn-iptables -P FORWARD DROP

0 commit comments

Comments
 (0)