I've recently set up a VPN to help some friends in areas where internet censorship is an issue, including the indiscriminate blocking of VPN traffic in general (see
here, for example) — as such, OpenVPN connections on their own are not feasible. To overcome this, I have clients create an SSH tunnel to my server and connect to OpenVPN over that. However, because the OpenVPN connection redirects the all the user's traffic (via the option "redirect-gateway def1", it tries to redirect the SSH tunnel (on which it resides, mind you) over itself, thereby disconnecting it.
What I'd like to do is have all clients' traffic
except that one SSH tunnel redirected, but I can't figure out how or where to implement that. How can I go about doing this?