ANSWERED Linux: Set up Firewall as per How-To from Staff member:

mr.Rhee

Hi,

This post is associated with this how-to:

https://airvpn.org/topic/9139-prevent-leaks-with-linux-iptables/?hl=%2Biptables+%2Bleaks+%2Blinux

I'm running Manjaro (Arch) Linux.

Kernel: x86_64 Linux 3.12.5-1-MANJARO

Plenty of RAM, CPU, storage space.

Modem/router IP: 192.168.1.1

Computer's IP: 192.168.1.2

There are a number of other devices on the LAN.

I've tried more than once to get the following IPTables input to work, I've modified the original to suit my machine as best I know how. I'm obviously not seeing something?

If someone could get me past the problem that I have with this I'll certainly be most grateful indeed?

iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
iptables -A OUTPUT -d 255.255.255.255 -j ACCEPT
iptables -A INPUT -s 255.255.255.255 -j ACCEPT
iptables -A INPUT -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
iptables -A OUTPUT -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
iptables -A FORWARD -i eth0 -o tun0 -j ACCEPT
iptables -A FORWARD -i tun0 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
iptables -A OUTPUT -o eth0 ! -d 95.211.149.213 -j DROP

If there is any additional information required please tell me & I'll post it?

Thanks for your time.

mr.Rhee

I put in a support ticket on the above problem & received a reply telling me that I was using the exit-IP address & not the required entry-IP address for the AirVPN server, in the following line which now shows the correct address:

iptables -A OUTPUT -o eth0 ! -d 95.211.149.195 -j DROP

So that was a quick & easy fix.