starred/docker-ipsec-vpn-server
1
0
Fork 0
mirror of https://github.com/hwdsl2/docker-ipsec-vpn-server.git synced 2026-04-26 18:15:50 +03:00
Code Issues Projects Releases Packages Wiki Activity

[GH-ISSUE #82] [Suggestion] Access to VPN-hosts from outside the Docker #70

New issue
Closed
opened 2026-03-02 07:11:30 +03:00 by kerem · 1 comment
kerem commented 2026-03-02 07:11:30 +03:00
Owner
Copy link

Originally created by @zdzichu6969 on GitHub (Jul 17, 2018).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/82

Access to VPN-hosts from outside the Docker

iptables rule in run.sh:

iptables -I FORWARD 7 -i eth+ -o ppp+ -j ACCEPT

Originally created by @zdzichu6969 on GitHub (Jul 17, 2018). Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/82 Access to VPN-hosts from outside the Docker iptables rule in run.sh: > iptables -I FORWARD 7 -i eth+ -o ppp+ -j ACCEPT
kerem closed this issue 2026-03-02 07:11:30 +03:00
kerem commented 2026-03-02 07:11:31 +03:00
Author
Owner
Copy link

@hwdsl2 commented on GitHub (Sep 7, 2018):

@zdzichu6969 Hello! Thanks for the suggestion. However, while the IPTables rule you suggested can enable access to VPN clients from outside Docker, it also exposes VPN clients to potentially malicious traffic initiated from the Internet. Note that by default, the IPTables rules in this image only allow "RELATED, ESTABLISHED" traffic from eth+ to ppp+.

<!-- gh-comment-id:419328060 --> @hwdsl2 commented on GitHub (Sep 7, 2018): @zdzichu6969 Hello! Thanks for the suggestion. However, while the IPTables rule you suggested can enable access to VPN clients from outside Docker, it also exposes VPN clients to potentially malicious traffic initiated from the Internet. Note that by default, the IPTables rules in this image only allow "RELATED, ESTABLISHED" traffic from `eth+` to `ppp+`.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
No results found.
Labels
Clear labels   
bug

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question
No labels
bug
pull-request
question
question
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-ipsec-vpn-server#70
No description provided.