Forcing traffic through tunnel for only specific IP range.

James2k

Hi all,

Been using OpenVPN successfully for over a year now. I run OpenVPN via DD-WRT on my WNR3500L router. I use a bridged config with the tap interface. Due to NetBIOS and Windows Share access. Recently I decided to push DNS addresses (local addresses on home network) so I could access services on my LAN easily, with local dns addresses like something.james.lan. This works fine, but the problem I've got is by pushing local DNS addresses I have now broke some internal DNS resolution at my workplace. In order to remedy this I did this in the client config:

# Home network goes through the VPN
route 192.168.1.0 255.255.255.0 vpn_gateway

# Work networks does not go through the VPN
# Due to DNS requirements
route 10.60.0.0 255.255.0.0 net_gateway

# Everything else goes through
redirect-gateway def1

This works but the problem is everything else goes through the gateway, which is rather slow.

Is it possible to sort of reverse the logic and force only a certain IP range through the VPN and let everything else use the specific workplace.

Thanks,

James

James2k

Solved:

I decided to completely drop pushing DNS addresses and putting all traffic through my tunnel via OpenVPN and instead added custom entries to my /etc/hosts file. That way I can maintain local DNS resolution at my workplace but can access local services on my LAN by DNS names.