n.bonavita Hi, i need to route through open vpn server only the vpn lan traffic and a pubblic ip. For example i have a: - local lan 192.168.0.0/24 gw 192.618.0.1 - vpn lan 10.0.0.0/24 gw 10.0.0.1, server ip 111.222.333.444 - online service with public ip 555.666.777.888 available only from ip 111.222.333.444 so i wouldn't route all traffic through vpn, i'd like to route on vpn only traffic to 10.0.0.0/24 and 555.666.777.888. I add to openvpn server config: route-nopull route 10.0.0.0 255.255.255.0 route 555.666.777.888 on the client i see the correct route but the packets seems don't come back from the server. I think i need to enable something with iptable on openvpn server but i don't know what... Can you help me? Thanks
TinCanTech n.bonavita wrote I add to openvpn server config: route-nopull Server's don't pull routes so remove that .. Start here: HOWTO: For OpenVPN Community Edition
n.bonavita Thanks a lot, i removed route-nopull and added push route too: server.config: ### Route Configurations Below route 10.0.0.0 255.255.255.0 route 555.666.777.888 ### Push Configurations Below push "block-outside-dns" push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" push "route 555.666.777.888" Clients.log dhcp-option DNS 8.8.8.8 dhcp-option DNS 8.8.4.4 add net 555.666.777.888: gateway 10.0.0.5 add net 10.0.0.1: gateway 10.0.0.5 but when i try traceroute to (555.666.777.888), 64 hops max, 52 byte packets 1 10.0.0.1 (10.0.0.5) 75.046 ms 31.548 ms 33.501 ms 2 * * * 3 * * * 4 * * * 5 * * * 6 * * * Any idea?
n.bonavita OK, solved with this server config: # route-nopull // Commented ### Route Configurations Below route 10.0.0.0 255.255.255.0 # route 555.666.777.888 // Commented ### Push Configurations Below # push "block-outside-dns" // Commented # push "dhcp-option DNS 8.8.8.8" // Commented # push "dhcp-option DNS 8.8.4.4" // Commented push "route 555.666.777.888" Thanks!