Hi guys!
This is a pretty advanced setup so bear with me when reading through my description 🙂
To illustrate my setup i have made this image where the red arrows are the route i do not manage to accomplish whereas all the grey arrows normal routing works fine.
http://www.produktion203.se/routing.jpg
So simply put what im trying to do is route traffic from my office local lan through openvpn out another office acting as a openvpn clients internet connection.
Now connecting from 10.0.0.0/24 to 10.0.2.14 works fine and vice-versa.
What i cant accomplish is routing outgoing internet traffic through the openvpn client, im trying this by manually adding a route for a site, in this example lets say
www.openvpn.net which has ip 67.228.116.150. So what i do is add a route for it with "route add 67.228.116.150/32 10.0.2.14".
Now the traffic to
http://www.openvpn.net gets sent through the tun0 interface on fw when i check the interface with tcpdump
00:00:00.000000 AF IPv4 (2), length 56: 10.0.0.168.49706 > 67.228.116.150.80: Flags [S], seq 2353234171, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
00:00:03.004004 AF IPv4 (2), length 56: 10.0.0.168.49706 > 67.228.116.150.80: Flags [S], seq 2353234171, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
00:00:03.434721 AF IPv4 (2), length 56: 10.0.0.168.49707 > 67.228.116.150.80: Flags [S], seq 375212824, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
BUT, it never ends up on the client where as no traffic that does not have a destination of 10.0.2.14 goes to it even though its supposed to get routed to it.
Im thinking i have to enter something in the openvpn config to allow non-vpn-ip traffic to be sent to a vpn-ip, or?