Inter-client communication Setting

NOYB

Inter-client communication - Allow communication between clients connected to this server

That option is NOT selected but VPN clients are able to ping each other. According to the description that seems to be not working correctly. Or am I missing something?

NOYB

Bump

Can anyone confirm either in the affirmative or negative that the Inter-client communication option works correctly (not enabled prevents VPN clients from communicating / pinging each other)?

dohko_44

I have the same question, the setting is unchecked but clients can ping, RDP is going through too.

fhaut

bump

I'm using version "2.3.4-RELEASE-p1 (amd64) built on Fri Jul 14 14:52:43 CDT 2017 FreeBSD 10.3-RELEASE-p19" and still the same situation or any has found another solution?

mazide

I also have the same question, all vpn clients ping each other without this option to be checked.
I wonder what is that option for ?

Pippin

With Inter-client communication inactive, firewall rules apply.
So if you want to block that, make rules on VPN interface.

With Inter-client communication active, firewall rules do not apply.
This is because in that case packets are routed internal to OpenVPN and pfSense does not see those packets at all.
Maybe picture says more:

slu

@pippin said in Inter-client communication Setting:

With Inter-client communication inactive, firewall rules apply.
So if you want to block that, make rules on VPN interface.

100% block OpenVPN traffic is only possible if..
..Inter-client communication disabled
..no firewall rule match on the pfSense OpenVPN interface

Right?
There is no change in OpenVPN 2.5 or?

Pippin

Yes, right and no change :)