#Ivpn firewall software#
#Ivpn firewall plus#

This article from the IVPN knowledge base has details:įor the IVPN App's CLI, check the syntax using ivpn firewall -h for the -exceptions command. The firewall exception instructs the IVPN App to allow the traffic to bypass its firewall and the static route instructs the computer system to route the traffic outside of the VPN tunnel and to the containers directly.

#Ivpn firewall plus#

To access the Docker-specific subnets while the IVPN App's kill switch firewall is active, make use of a firewall exception in the IVPN App plus a static route on the local machine. The IVPN App's Allow LAN traffic and Allow Multicast options only support the subnet offered by the local router and not any additional subnets in use by Docker containers (or VM software, or VLANs, for example). VPN Connected + Firewall OFF = able to access my docker containersĭocker containers tend to make use of additional local subnets on the local machine, which could be different and separate from the local network provided by your local router. VPN connected + firewall on + Allow LAN:true = not able to access my docker containers. A IVPN-IN-STAT-EXP -s 192.168.1.0/24 -j ACCEPT For example, if you open firewall 'WAN to ZyWALL' for services like HTTPS or VPN, try to define sources (Geo IP) or add a group of addresses (Remote WAN, Remote FQDN) you work with to keep your device not public open to the Internet Change HTTPS Port and do our security check, separate the HTTPS port from SSL VPN Port, to reduce risk. Cherry picked examples: -A IVPN-OUT-STAT-EXP -d 192.168.1.0/24 -j ACCEPT I checked my iptables firewall and I have in and out rules listed from ivpn for my docker networks and my local lan's network. Inspected the docker network the containers are attached to and see it's using the network 172.21.0.0/16 Whenever I disable the ivpn firewall, communication immediately starts working again. I can ping 192.168.1.20 from my other machines. When on another machine on the same network and trying to access the web interfaces on, they do not connect. I currently have my ivpn firewall set to 'Enabled' with Allow LAN set to True and Allow IVPN Servers set to true. I have an ubuntu 22.04 vm where I have ivpn and docker running.

#Ivpn firewall software#

Ended up switching to gluetun and all is working now. Zyxel has released software updates to address two critical vulnerabilities (CVE-2023-33009 and CVE-2023-33010) affecting their firewall and VPN products. Update: Couldn't get to the bottom of this with the ivpn linux cli client.