benh
Hi all - first post.
I have just started using OpenVPN as implemented in a version of DD-WRT.
I have configured the router to use the OpenVPN client with an always on tunnel to a provider for proxy and encryption purposes.
I was getting very slow performance (20% of my bandwidth) until I migrated the install from a consumer router over to a virtual machine running on a beefier server.
Everything is working well for now (still gauging my provider's performance) - except I seem to have lost one crucial ability:
While I would like to keep my OpenVPN tunnel on all the time to encrypt all traffic sourced from my internal network, I would also like to still be able to use my public IP to reach my internal servers via port forward/NAT. I have several internal web servers and remote control applications that I would like to still be able to access from *any* external IP to my internal network. I would need to reach this via my public IP and, as such, do not need that traffic to pass over the VPN.
I'm not even sure what the right terminology to use here is (split tunnel? policy route?) and not sure if it is possible to even do.
Can someone help me get a head start?
thanks
brendan
to pass the external traffic from outside your network, you need to port forward on your router. you should only be forwarding the transport and port used in your openvpn config to the instance of openvpn. example: UDP 1194 is what you are using for openvpn, then you only port forward UDP 1194 to the instance at 192.168.x.x. then you can still port forward TCP 80 and TCP 443 to 192.168.x.y (or even to the same IP 192.168.x.x).
benh
Could you be more specific, as what you are stating doesn't sound correct to me.
I should have been more specific in my OP by saying that I have already set up port forwards (e.g. forward external port 8080 to internal port 80 of a given internal IP).
When my OpenVPN connection is active I am unable to access the internal server over the forwarded ports from a remote location.
As soon as I terminate my VPN tunnel I am able to access the internal IPs.
AFAIK no port forwards are required for OpenVPN to work (including forwarding 1194) because the VPN tunnel is being initiated from my end.
