Perfect iptables for OpenVPN

linux_forum1 <[email protected]> Sat, 25 Dec 2021 23:09:57 +0000
Newsgroups gmane.linux.debian.devel.firewall
Message-ID <4jq_HOXOHcD2jq71IS2YzN83YsH_mEqbDznbSQAKHdr_EtsQsjq830QIej3PqSpYk4oeEyWDYgaC5lQpdHnRQrG9EGU0dyg07v02T_i8hrQ=@protonmail.com>
This is a multi-part message in MIME format.

--b1_dDbCEzhL0AdmLvWrJmiTJ1dShhMLTRt1jlLgks8GeXE
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
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--b1_dDbCEzhL0AdmLvWrJmiTJ1dShhMLTRt1jlLgks8GeXE
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
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--b1_dDbCEzhL0AdmLvWrJmiTJ1dShhMLTRt1jlLgks8GeXE--