Gelle
Hi there,
my OpenVPN Server is running correctly and all the traffic is redirected to my Server, as I want. Now I would like to route traffic on port 80 on the client side trough the old standardgateway to internet, not beeing forwarded through my OpenVPN Server.
How can I do this?
The idea is: The clients should only use the services of my PC over VPN. Thatfor the FORWARD's chain policy is set to DROP. But they should also be able to use Internet. Thatfor the traffic on Port 80 schould not be routet through my Server.
Thanks a lot
janjust
this needs to be set using iptables on the *client* and actually has nothing to do with openvpn ...
Gelle
Yes I thought so, but my clients all use windows
janjust
you **might** be able to use IPSec filtering rules for this, but that will get very hairy; otherwise, install a third party firewall package.
Gelle
The problem is, I would like to offer this solution to all the clients, using my VPN. For the easiness I would prefer writing a batch, which only has to be started as admin Is this possible with IPsec? Do you know a HowTo, dealing with my topic?
Gelle
Just another idea:
I am using the redirect-gatway... option to redirect all the traffic to my server. Isn't there an option in the openvpn.conf, to redirect all the traffic without the traffic from port 80?
Thanks alot
janjust
nope, you're either redirecting ALL traffic or none at all - there's no port-based traffic redirecting.