Blocking localnetwork.

[vpnbottle 0]

Is there a way to block Local network connections?

 

I'm thinking of scenarios like this.

 

Router or portal or Firewall or ISP sets up it's own DNS MITM like over the Router IP like 192.168.0.100:53

 

So, in the cases AirVPN allows this IP even in network Lock and DNS leaks occurs.

 

Or may be a HTTP SSH proxy attacks etc on the LAN computers which are not using AirVPN.

 

 

So, to avoid scenarois like this and others, is there a way for people to block LAN connections?

[Flx 76]

So, to avoid scenarois like this and others, is there a way for people to block LAN connections?

The links in my signature may help in this case.

For routers

----------tomato routers----------

iptables -I FORWARD -i br0 -o tun11 -j ACCEPT

iptables -I FORWARD -i tun11 -o br0 -j ACCEPT

iptables -I FORWARD -i br0 -o vlan2 -j DROP

iptables -I FORWARD -i br0 -o ppp0 -j DROP

iptables -I INPUT -i tun11 -j REJECT

iptables -t nat -A POSTROUTING -o tun11 -j MASQUERADE

-------------------------tomato routers----------------------------

-------------------dd-wrt---------------

iptables -I FORWARD -i br0 -o tun0 -j ACCEPT

iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

iptables -I FORWARD -i br0 -o vlan2 -j DROP

iptables -I FORWARD -i br0 -o ppp0 -j DROP

iptables -I INPUT -i tun0 -j REJECT

iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

-------------------dd-wrt---------------

Regards,

Flx