<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Assigning OpenVPN interfaces and firewall rules]]></title><description><![CDATA[<p dir="auto">From 1.2.3 i'm used to force different openvpn tunnels to specific tuns and assign them as OPTs.</p>
<p dir="auto">Since we have with 2.0 a new firewall tab for openvpn i'm not sure how to work with this.<br />
I recently needed the IGMP proxy to work through a VPN tunnel.<br />
For this i assigned the tunnel as OPT and enabled the proxy on it.<br />
However now there is a tab for the OPT and OpenVPN in general.</p>
<p dir="auto">In what order are the tabs/rules processed?<br />
Does it even matter if rules are on one tab or the other?<br />
Or does ot behave like with floating rules and interface specific rules?</p>
]]></description><link>https://forum.netgate.com/topic/32489/assigning-openvpn-interfaces-and-firewall-rules</link><generator>RSS for Node</generator><lastBuildDate>Mon, 13 Apr 2026 01:52:25 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/32489.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 07 Apr 2011 11:18:12 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Assigning OpenVPN interfaces and firewall rules on Thu, 07 Apr 2011 12:43:17 GMT]]></title><description><![CDATA[<p dir="auto">Yes this helps.<br />
Thanks.</p>
]]></description><link>https://forum.netgate.com/post/274070</link><guid isPermaLink="true">https://forum.netgate.com/post/274070</guid><dc:creator><![CDATA[GruensFroeschli]]></dc:creator><pubDate>Thu, 07 Apr 2011 12:43:17 GMT</pubDate></item><item><title><![CDATA[Reply to Assigning OpenVPN interfaces and firewall rules on Thu, 07 Apr 2011 11:57:11 GMT]]></title><description><![CDATA[<p dir="auto">Well in the new tab you can put more specific rules.<br />
Though if you are happy with what you have under the general rule than its ok.</p>
<p dir="auto">You can easily consider OpenVPN tab as a interface group, under the hood its the same and probably would make sense to have it show up in interface groups by default.<br />
I will create a TODO on redmine for this to not be forgotten.</p>
<p dir="auto">Hoepfully that answers your question.</p>
]]></description><link>https://forum.netgate.com/post/274059</link><guid isPermaLink="true">https://forum.netgate.com/post/274059</guid><dc:creator><![CDATA[eri--]]></dc:creator><pubDate>Thu, 07 Apr 2011 11:57:11 GMT</pubDate></item></channel></rss>