Help: ForceBindIP + OpenVPN Fine App Connection Control

Dav_Edward

I hope I'm using the right section for this question.

I've been looking up and down the forums trying to find an answer to my problem but I can only seem to find answers that involve having to use route commands manually one by one with IP addresses.

This is the ideal setup I'm trying to aim for:
-All typical traffic uses normal local ISP connection
-Select applications use ForceBindIP to force them to use VPN connection
-VPN connection does not redirect normal traffic though VPN, only applications binded to it.

I have already looked over tutorials like https://community.openvpn.net/openvpn/wiki/IgnoreRedirectGateway
and http://support.vpnsecure.me/articles/frequently-asked-questions/openvpn-split-tunneling
and the ForceBindIP tool itself: http://old.r1ch.net/stuff/forcebindip/

The first tutorial works, I'm able to stop the VPN server from forcing all my traffic through the VPN so that normal applications stay on my normal ISP. But I want to get ForceBindIP to work as my method to make applications use the VPN on demand rather than me having to manually set a route for every IP address that I can't easily tell what the application may be trying to use.

I tried both using built-in Windows PPTP and OpenVPN's client, but even though I set the client to ignore the redirect-gateway, it does connect to the VPN happily, but just sits there. If I force-bind an application to the TAP Interface for example Firefox, and check my IP it still shows my local IP address.
Example command: "C:\Windows\SysWOW64\ForceBindIP {2240510C-3E9C-4288-9140-E7D1CD8B9A45}" firefox.exe
or
"C:\Windows\SysWOW64\ForceBindIP 100.10.10.10 firefox.exe (whatever happens to be the current IP address of my VPN connection)

Could someone please help me with figuring this out? Thanks in advance.

Traffic

What version of OpenVPN are you using ?

btw: Binding applications to a specific interface on windows does not have much effect over all.

Dav_Edward

Traffic wroteWhat version of OpenVPN are you using ?

btw: Binding applications to a specific interface on windows does not have much effect over all.

I'm using OpenVPN 2.3.6 on Windows 8.1 64bit

I know (at least back on Windows 7) that ForceBindIP works great for forcing applications to go through Hamachi VPN for making fake LAN games over the internet. I'm trying to do the same sort of results with OpenVPN to force specific applications to use OpenVPN. I even went to the effort of trying to set up a Squid server to have a localhost proxy that forces traffic through the VPN and it works, however Squid seems to take forever to load anything and this solution doesn't work for applications that don't allow HTTP proxy.

I still am confused why ForceBindIP worked so well with Hamachi or forcing applications on Wifi/Wired-Ethernet but seems to do nothing to PPTP VPN or OpenVPN.

Dav_Edward

Addendum:

I should add following the tutorial I linked in first post the method I'm stopping redirect-gateway is by adding the following two lines to my opvn file:

route 0.0.0.0 128.0.0.0 net_gateway
route 128.0.0.0 128.0.0.0 net_gateway

I can't show the entire file due to the certs being inside the file but I'll show you the non-cert lines:

client
dev tun
reneg-sec 0
persist-tun
persist-key
ping 5
ping-exit 30
nobind
comp-lzo adaptive
remote-random
ns-cert-type server
route-metric 1

route 0.0.0.0 128.0.0.0 net_gateway
route 128.0.0.0 128.0.0.0 net_gateway

(Cert Stuff Here)

<connection>
remote us-mia.vpnunlimitedapp.com
proto udp
</connection>

Also side note, although the provider is VPN Unlimited I am using the pure true OpenVPN client, not the official VPN Unlimited client. VPN Unlimited offers vanilla PPTP or raw .opvn files to customers with 1+ year subscriptions if requested.

Thanks.

nilanka

It's been more than an year, but I wanted to know if you've found a solution for this.

Thanks,
Nilanka

spokuha

Still interesting, how make it work, i have same problem