2026-08-09 09:51:49 +08:00 · 2026-05-02 18:49:43 +02:00
parent 4c85218f41
commit 8913ffadff
2 changed files with 13 additions and 1 deletions
@@ -688,10 +688,13 @@ no-route = 192.168.5.0/255.255.255.0
#no-udp = false
# If set, the script /usr/libexec/ocserv-fw will be called to restrict
# the user to its allowed routes and prevent him from accessing
# the user to its allowed routes and prevent them from accessing
# any other routes. In case of defaultroute, the no-routes are restricted.
# All the routes applied by ocserv can be reverted using /usr/libexec/ocserv-fw
# --removeall. This option can be set globally or in the per-user configuration.
#
# Note: the ocserv-fw script requires either nft (nftables) or iptables at runtime,
# depending on the backend selected with -Dfirewall-script= at build time.
# [scope: vhost user]
#restrict-user-to-routes = true