jetanotherbullshitaccount
the setup:
I set up an OpenVPN server on a box at home.
This box also hosts other services which I want to reach through the VPN.
The home network is behind NAT.
Port forwarding for OpenVPN is configured.
Connecting from my clients to the server works.
All traffic is sent through the VPN, exept:
the problem:
I am connected to the VPN.
I contact one of the other services running on my box.
This service has the same public IP as my VPN server (because same box and NAT).
The connection to the service DOES NOT go through the VPN.
the cause:
There is a route created by OpenVPN that says all traffic for the VPN endpoint IP goes through the public interface.
All other traffic goes through the tun device and thus through the VPN.
This breaks privacy and security when I connect to my own services from an untrusted network.
How do I fix this????
