I'd like to see the following security enhancement (fix frankly) in FreshTomato. By default, the OpenVPN client adds the following firewall rules.
For unidirectional tunnels (typical seen w/ a commercial OpenVPN provider), this is unnecessary. By default, all local networks (br0, br1, etc.) are allowed to initiate outbound connections to the internet, whatever the network interface (vlan2 (wan),...
OpenVPN Client Security Enhancement
Code:
iptables -I INPUT -i tun11 -j ACCEPT iptables -I FORWARD -i tun11 -j ACCEPT
OpenVPN Client Security Enhancement