Exclude specific ports from VPN traffic without blocking

chiappa

I would like to know if it's possible to have certain ports bypass the VPN tunnel.

In my case I want to reduce server load by excluding torrent traffic from being sent through the OpenVPN tunnel. So on the client side I would have ports 49152-65534 have a direct connection to the internet.

How could I achieve something like this? Thank you!

Regards,
Chiappa

Mimiko

On client, if it is running on linux, you can use iptables rules to redirect those ports.

For windows you will have to use 3rd party firewalls.

chiappa

Ok, thank you for your answer. My server is running on Debian. Could you be so kind and tell me specifics of such a iptables rule?

Thank you,
Chiappa

Mimiko

You have to use iptables on client, not on server. Port redirection using iptables can be found on internet with lot of explanation.

chiappa

Ok, so this is not possible on the server side. I found out that it would be so easy to exclude a specific IP: just add "route ip-here 255.255.255.0 net_gateway" to the config file. If only it would be that easy for redirecting ports to the default gateway...

First, I'm using Mac OS X.

I figured here: http://www.openbsd.org/faq/pf/rdr.html adding a line to /etc/pf.conf would do the trick but not: "PF ERROR! No ALTQ support in kernel. ALTQ related functions disabled"..

Another could be using ipfw but haven't found any instructions for that..