Is it possible to somehow force all IP traffic through our corporate OpenVPN server by just changing the client config?
From serverfault
Marc
-
The
redirect-gateway
would do this, but the host that your VPN server is running on must be configured correctly to route your packets out onwards and return responses to you (i.e. if it is setup to do NAT for the VPN interface).From David Spillett -
Once you log into the admin section there is a menu option called VPN settings. In there you can find different routing options:
Marc : Sorry but where can I find this admin section on the client? As mentioned in the question I don't want to change anything on the server. I'd just like to force an OpenVPN client to pass all traffic through the VPN.quickcel : Oops - I didn't read the question carefully enough. That setting can only be changed on the serverFrom quickcel -
No.
In order to make some guarantees about security, the server cannot trust the client. Everything is driven from the client. Imagine if your question was: "Can I change something on my browser so that I can view facebook from behind the corporate proxy?"
From kbyrd
0 comments:
Post a Comment