Thread: pf.conf help?
View Single Post
Old 24th January 2018
jggimi's Avatar
jggimi jggimi is online now
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 6,376
Default

Quote:
Originally Posted by ucharfli View Post
When the VPN connection is disconnected, I do not want to go online with the Web browser.
Is not PF needed?
If you do not have a VPN, I do not want your Internet..!
This is a different requirement from your original post.

It is my understanding that the VPN technology used by ProtonVPN is OpenVPN. OpenVPN uses UDP or TCP connections, the standard port number is 1194 with either protocol.

Yes, PF can limit all inbound and outbound traffic on the physical interface to TCP or UDP that connects with that port number. It can then permit all "internet" destined traffic to use the tap(4) tunnel device created by OpenVPN on OpenBSD.

However, you may need some open connectivity to the Internet in order to establish the OpenVPN connection to your service provider, such as domain name services. Is your connection to your service provider by domain name, or by IP address?

You may also need some open connectivity to establish your system's IP address. DHCP is the most common protocol used to obtain dynamic IP address and routing information.

Last edited by jggimi; 24th January 2018 at 04:01 PM.
Reply With Quote