Comments on: Making CSF work with OpenVPN https://www.grumpyland.com/blog/238/making-csf-work-with-openvpn/ Just another Blog Sun, 11 Jul 2021 07:32:14 +0000 hourly 1 https://wordpress.org/?v=7.0 By: nader https://www.grumpyland.com/blog/238/making-csf-work-with-openvpn/#comment-16754 Sun, 11 Jul 2021 07:32:14 +0000 https://www.grumpyland.com/blog/?p=238#comment-16754 thank’s pls share a new post with shadowsocks

]]> By: Chris https://www.grumpyland.com/blog/238/making-csf-work-with-openvpn/#comment-16709 Sun, 08 Nov 2020 11:19:12 +0000 https://www.grumpyland.com/blog/?p=238#comment-16709 Thanks, worked for me too!!

]]> By: Aitor https://www.grumpyland.com/blog/238/making-csf-work-with-openvpn/#comment-16552 Thu, 05 Sep 2019 09:08:02 +0000 https://www.grumpyland.com/blog/?p=238#comment-16552 It worked for me, thank you.

]]> By: shunkica https://www.grumpyland.com/blog/238/making-csf-work-with-openvpn/#comment-16513 Thu, 10 Jan 2019 22:21:08 +0000 https://www.grumpyland.com/blog/?p=238#comment-16513 These rules in csfpre.sh will break many services on WHM/cPanel servers, mail servers, etc.
Use this instead, replace tun0, eth0 and 10.8.0.0 with values specific to your server if they are different.

iptables -A INPUT -i tun0 -j ACCEPT
iptables -A OUTPUT -o tun0 -j ACCEPT
iptables -A FORWARD -i tun0 -o eth0 -j ACCEPT
iptables -A FORWARD -i eth0 -o tun0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

]]>