how to set OpenVPN client connection to only see one machine in network

[SirVire]

So, to keep things short, i have a client who needs to provide access to one of their server to a long-distance user via OpenVPN. However, my superior wants to ensure while using the VPN connection, they can see only the server they are interfacing with and no other machines on the network.

I need to know how to fence in that specific User's connection to one particular server, but I am unsure how to go about setting something like that up.

Any help would be appreciated.

[jcoffin]

Use Firewall App to restrict the OpenVPN user's name to that IP.

[sky-knight]

Use Firewall App to restrict the OpenVPN user's name to that IP.

[ATTACH=CONFIG]11625[/ATTACH]

Yes this!

Make a rule that blocks everything from source interface openvpn, then make pass rules for username to match the OpenVPN client name, and whatever else you need to limit things to the appropriate target.

I do this all the time to authorize users to RDP into their stations, and ONLY their stations while only allowing RDP. Very flexible, very stable, very safe solution.

[SirVire]

Thank you, this is exactly what I need. Cheers friends!

[Spiral]

Exactly what I have done for years.