I have an OpenVPN client set up on my DD-WRT home router which maintains a VPN into my workplace.
Slight problem: I don't want random lusers who access my wireless AP to have access to my company's VPN. (yes, it's secured acceptably well, but I have reason to take further steps.)
iptables be convinced to deny routing to all source MAC addresses except a select few which I specify? I tried using the
--mac-source parameter as follows:
iptables -I FORWARD -i br0 -o tap0 -j REJECT iptables -I FORWARD -i br0 -o tap0 -j ACCEPT --mac-source 00:01:02:03:04:05
REJECT rule works, but the
ACCEPT rule does not. (note that the
-I parameter is being used to ensure that the
ACCEPT rule comes before the
Has anyone else had experience setting up a whitelist like this?