Not all traffic goes through OpenVPN

koper89

Hi,
I have a problem I think I messed up my firewall settings and now some of data goes through VPN and some through eth0:
What I messed up is, i firstly wanted to put openvpn only through 1 Port rest by eth0 but i couldn't do it and i wanted to restore my previos settings and go all by openvpn, but now when i look in netstat i got some of the traffic goes through openvpn some through eth0.
What i changed was:
iptables -A OUTPUT -o tun0 -j DROP
iptables -A INPUT -i tun0 -j DROP
iptables -A FORWARD -i tun0 -j DROP
iptables -A OUTPUT -o eth0 -j ACCEPT
iptables -A INPUT -i eth0 -j ACCEPT
iptables -A FORWARD -i eth0 -j ACCEPT

iptables -D OUTPUT -o tun0 -j DROP
iptables -D INPUT -i tun0 -j DROP
iptables -D FORWARD -i tun0 -j DROP
iptables -D OUTPUT -o eth0 -j ACCEPT
iptables -D INPUT -i eth0 -j ACCEPT
iptables -D FORWARD -i eth0 -j ACCEPT

firstly i added those lines then i deleted those rules.
Before this f.e. i couldn't get to 1 of my ports using my router's WAN IP, now I can get to it with both my routers IP and my OpenVPN server IP, so it's quite dissapoining.

Client is on xbian (debian based) OS on Raspberry Pi.

route output on client side:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 10.8.0.14 128.0.0.0 UG 0 0 0 tun0
default unknown 0.0.0.0 UG 0 0 0 eth0
ns3278352.ip-5- unknown 255.255.255.255 UGH 0 0 0 eth0
10.8.0.1 10.8.0.14 255.255.255.255 UGH 0 0 0 tun0
10.8.0.14 * 255.255.255.255 UH 0 0 0 tun0
128.0.0.0 10.8.0.14 128.0.0.0 UG 0 0 0 tun0
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0

I hope somone can help
Best wishes.

koper89

I installed it at debian using apt-get install openvpn so i suppouse i got community edition:) Can you redirct this topic or should i create new one?

koper89

Server conf:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
client-config-dir ccd
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
tls-auth ta.key 0
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 4
mute 20
chroot /etc/openvpn/jail

Client cong:

client
dev tun
proto udp
remote my.ip 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert koper.crt
key koper.key
tls-auth ta.key 1
cipher AES-256-CBC
comp-lzo
verb 4
mute 20