Re: [gentoo-user] VPN question

[Mick <michaelkintzios@gmail.com>]

[-- Attachment #1: Type: Text/Plain, Size: 1845 bytes --]

On Monday 23 Dec 2013 17:44:17 Timur Aydin wrote:
> On 12/23/13 18:24, Burak Arslan wrote:
> > Once the VPN connection is established, among the routes pushed by your
> > OpenVPN provider is also a default gateway entry which routes every
> > non-local packet through the vpn.
> 
> Here is the routing setup after the tunnel is up:
> 
> bonsai ~ # /etc/init.d/openvpn start
>  * Starting openvpn
>  * WARNING: openvpn has started, but is inactive
> bonsai ~ # ip route show
> 0.0.0.0/1 via 10.8.2.213 dev tun0
> default via 92.44.0.41 dev ppp0  metric 4007
> 10.2.1.0/24 dev eno1  proto kernel  scope link  src 10.2.1.254
> 10.2.2.0/24 dev enp1s0  proto kernel  scope link  src 10.2.2.254
> 10.2.3.0/24 dev enp8s0  proto kernel  scope link  src 10.2.3.254
> 10.8.2.209 via 10.8.2.213 dev tun0  metric 1
> 10.8.2.213 dev tun0  proto kernel  scope link  src 10.8.2.214
> 92.44.0.41 dev ppp0  proto kernel  scope link  src 176.41.233.165
> 127.0.0.0/8 dev lo  scope host
> 127.0.0.0/8 via 127.0.0.1 dev lo
> 128.0.0.0/1 via 10.8.2.213 dev tun0
> 173.195.6.91 via 92.44.0.41 dev ppp0
> 
> > Your daemons at home receive a packet via your static Turkish address
> > but, because you got your default gw configured to be your vpn provider,
> > the response packet goes through NY. Due to reverse-path filtering or
> > some other fact of nature, it's dropped somewhere along the way.
> > 
> > If that's the case (big if :)), here's what you need to do:
> > http://lartc.org/lartc.html#AEN267
> 
> Thanks for this link! I will need some time to digest this information
> and will report back with my progress.

Also have a look here for OpenVPN specific split tunnelling (split routing):

  http://dltj.org/article/openvpn-split-routing/

  https://forums.openvpn.net/topic7065.html

HTH.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 490 bytes --]