# RESF using OpenVPN

**URL:** <https://forums.rockylinux.org/t/resf-using-openvpn/3504>\
**Category:** Rocky Linux Help & Support\
**Created:** [July 13, 2021, 10:50pm UTC](https://forums.rockylinux.org/t/resf-using-openvpn/3504 "2021-07-13T22:50:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![nasheayahu](https://avatars.discourse-cdn.com/v4/letter/n/50afbb/32.png) [@nasheayahu](https://forums.rockylinux.org/u/nasheayahu)\
**Post date:** [July 13, 2021, 10:50pm UTC](https://forums.rockylinux.org/t/resf-using-openvpn/3504/1 "2021-07-13T22:50:47Z")

</div>

Question, is the only way to use a VPN is through a VPN Server? I’ve read this _[Firewalld not passing traffic between zones (WireGuard)](https://forums.rockylinux.org/t/firewalld-not-passing-traffic-between-zones-wireguard/3288)_ and if so, I would like to be linked to a good tutorial on how to configure a VPN Server using Wireguard / OpenVPN (whichever is best).

I’m using **ExpressVPN** on my LinuxMint and would like for my servers to do the same thanks!..

P.S. Yesterday after finding out about Centos being phased out at year end and reading the discussions on how disappointing to many, I found Rocky. I want to say, I’m very happy to have found it before going into production mode by next summer. So, I’ve dropped RHEL and will be subscribing to fund RESF success.

---

<div class="post-metadata">

**Author:** ![tjdoyle](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/tjdoyle/32/500_2.png) [@tjdoyle](https://forums.rockylinux.org/u/tjdoyle)\
**Post date:** [July 14, 2021, 10:19am UTC](https://forums.rockylinux.org/t/resf-using-openvpn/3504/2 "2021-07-14T10:19:56Z")

</div>

Hi,

The guide linked here:

> [@Firewalld not passing traffic between zones (WireGuard)](https://forums.rockylinux.org/t/firewalld-not-passing-traffic-between-zones-wireguard/3288/4):
>
> Hi, @Rainmaker, Had any joy? If not I think this guide should get wireguard working as required: [https://www.cyberciti.biz/faq/centos-8-set-up-wireguard-vpn-server/](https://www.cyberciti.biz/faq/centos-8-set-up-wireguard-vpn-server/) Just been looking at this out of curiosity. Thanks Tom.

Should do the trick.

Thanks Tom.

---

<div class="post-metadata">

**Author:** ![nasheayahu](https://avatars.discourse-cdn.com/v4/letter/n/50afbb/32.png) [@nasheayahu](https://forums.rockylinux.org/u/nasheayahu)\
**Post date:** [August 16, 2021, 11:40pm UTC](https://forums.rockylinux.org/t/resf-using-openvpn/3504/3 "2021-08-16T23:40:46Z")

</div>

Thanks, appreciate the reply!..

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [August 17, 2021, 8:29am UTC](https://forums.rockylinux.org/t/resf-using-openvpn/3504/4 "2021-08-17T08:29:49Z")

</div>

The version of firewalld in el8 (0.8.2) lacks support for proper router. [Policy Objects: Introduction | firewalld](https://firewalld.org/2020/09/policy-objects-introduction)

An option is to replace `firewalld.service` with `nftables.service` and generate (manually) proper _nftables ruleset_

---

<div class="post-metadata">

**Author:** ![brian](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/brian/32/5777_2.png) [@brian](https://forums.rockylinux.org/u/brian)\
**Post date:** [August 25, 2023, 4:06am UTC](https://forums.rockylinux.org/t/resf-using-openvpn/3504/5 "2023-08-25T04:06:37Z")

</div>


