I'm setting up a Debian 7 linode which will need to run OpenVPN. Before starting the
Debian OpenVPN instructions I setup the linode using the
Getting Started and
Securing Your Server docs, so my linode's firewall configuration is
Code:
me@linode:~$ date ; sudo iptables -L
> Wed Oct 15 21:24:25 EDT 2014
> Chain INPUT (policy ACCEPT)
> target prot opt source destination
> fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
> ACCEPT all -- anywhere anywhere
> REJECT all -- anywhere loopback/8 reject-with icmp-port-unreachable
> ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
> ACCEPT tcp -- anywhere anywhere tcp dpt:http
> ACCEPT tcp -- anywhere anywhere tcp dpt:https
> ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
> ACCEPT icmp -- anywhere anywhere
> LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level debug prefix "iptables denied: "
> DROP all -- anywhere anywhere
> Chain FORWARD (policy ACCEPT)
> target prot opt source destination
> DROP all -- anywhere anywhere
> Chain OUTPUT (policy ACCEPT)
> target prot opt source destination
> ACCEPT all -- anywhere anywhere
> Chain fail2ban-ssh (1 references)
> target prot opt source destination
> RETURN all -- anywhere anywhere
Unfortunately my knowledge of linux networking generally, and `iptables` particularly, is not great. So I'd like to know: will I need to change my `iptables` rules in order to accommodate OpenVPN? Note my usecase is pretty simple: I'm just configuring the linode to be a jumpbox through which to route traffic to another network.