Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been asked to configure a firewall between the public and private parts of a network for a small UK charity. The only imposed requirements is that the firewall must allow access using VPN into the private area for correctly configured users and all the machines inside the private area must be able to operate normally as if connected via a NAT modem to the internet. We want the private network facilities to be available via the VPN to these users from home.

We have a dual ported Linux box running Ubuntu 12.04 LTS Server to act as the firewall and vpn connection point. I have followed the directions for the Shorewall dual ported set-up and I have OpenVPN roadwarrior working. However, no matter what configuration options I use I end up with all the machines unable to connect out to the internet.

I would publish the configuration files but with OpenVPN, Shorewall, dchp and eventually dns there are quite a number involved and a few others are also indirectly implicated like networking.

As I believe this is a common requirement I will be very happy to publish a How To here once I have finished the configuration with explanations of all the settings I understand in the hope of helping others.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.