top | item 45173180

(no title)

torium | 5 months ago

I am also one of those people who "don’t usually do a lot of networking stuff", so here's a question.

The article contains this:

    #replace eth0 with the interface open to the internet (e.g might be wlan0 if wifi)
    PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

However, I use mullvad and the .conf files that they provide contains none of this, and works just fine. It contains just: interface, private key, address, dns and peer public key, allowed ips, entrypoint.

So, which one is right and why?

discuss

Ingon|5 months ago

I have to double check, but I believe this is server-side/exit node configuration. In case of mulvad, something similar might be on their servers.

thedanbob|5 months ago

Those lines are only needed on the VPN server, not the client(s).