Home server configuration help

zanophol

I have a home server that runs a multitude of services for me. Anything from dnsmasq, dhcp, iptables firewall to ftp, ssh and even an openvpn server. The server does a far amount of downloading, so I want to implement an outgoing openvpn connection for these download sessions to initiate over (through a provider). This all works just fine. The only problem I am discovering is that if I need to be remotely located and want access back into the server, I have to turn the outgoing openvpn connection off. I would love to have my incoming connections listening on the public eth0 interface and not have tun0 (the outgoing vpn interface) interfere. My firewall treats both connections the same in the rules, and I have ssh configured to only listen on eth0. However, I am missing the last piece I believe. I have attached the contents of my vpn provider's client.conf. Any ideas?

client
dev tun
proto udp
remote INTENTIONALLY LEFT OUT 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
tls-client
remote-cert-tls server
auth-user-pass
comp-lzo
verb 1
reneg-sec 0

Mimiko

You VPN provider pushes a "redirect-gateway" option to you, in order to have all internet traffic to be gone thru tunnel. If you will connect to the server from same IP, just add an option to routing table for your IP to forward packets via eth0:

route add your_IP gw server's_gateway eth0