Bagger wroteFirefox is routed over the tunnel but no tracert, RDP etc. pp.. Tracert to the public server-IP goes the way without tunnel
When you use --
redirect-gateway to force data over the VPN, the one IP address which is
not routed over the VPN is the public IP of your VPN server, otherwise the VPN packets would be routed through the tunnel and your VPN would collapse.