Posts by zomboided

Oh yes, I had missed your earlier post. I already have options to augment the ovpn files with additional options so adding this would be easy.

Thanks for the email Mr Infinity. Let's have the conversation here so I better understand. I don't have my LibreELEC boxes handy right now.

Regardless of the approach that's used, I think the requirement is to update the iptable before establishing a VPN with the following two commands?

iptables -A INPUT -i tun+ -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i tun+ -j DROP

If a VPN is disconnected, what effect do these commands have? I think they'll be redundant, correct (ie, my router firewall will do the right thing as I don't have a VPN punching a hole, plus I can still ping, etc from the local network)? And therefore there's no need to remove them.

If they are redundant why is there a requirement to switch it on and off? I think any integration with VPN Manager (which seems like a good idea, with it turned on by default), would be just to ensure these commands are sent, with an option to not do this for users that want to create their own special rules and go down a path of a systemd task that does magical things at boot?

Quote from kylepmorris

Try to connect it with PureVPN. Many users are using PureVPN with LibreeLec. For more details about PureVPN you check this PureVPN Review 2016

I think anyone using PureVPN should read this first and understand their exposure OpenELEC Mediacenter - OpenELEC Forum - Massive security issue:certain VPN providers on OE (1/1)

Thanks to you both, that's helpful.

I want to try and mess with systemd as part of an addon I've written that runs on multiple platforms. Is it as simple as checking for the existence of "/storage/.config/system.d" to determine whether this function is available to me? Or is there a way to check that the platform is LE so that I can assume it's there? Thanks