Open VPN cut local internet off

Matanuy

Hy
A Frend and me using OpenVPN to conect our little NAS. So his Computer is now conectet via Open VPN directli to my router. We did that because the vpn from the NaS direct is not working.
but now he go ALWAY first to my network and then via my internet to the web.
so when he tipes 192.168.1.1 in the Browser he came to my router and not to his.
how can we fix this so that the VPN conection is only on for the Explorer and maybe to conect to the NAS.

if i need to provide some more infos for you. pls explain how i can get this. maybe idk how i can find them if i need to do ^^'

thx for helping me out.

TinCanTech

Do not use --redirect-gateway

See the HOWTO: https://community.openvpn.net/openvpn/wiki/HOWTO

300000

you only add this line into client config and connect it again . it shoul do the trick

route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway

TinCanTech

That is a backwards way to do the same thing as not using --redirect-gateway.

Matanuy

@TinCanTech
you only give me the overall how to link. but i have no idea where to put in the code i found
is (push "redirect-gateway def1") the rigth or push "redirect-gateway local def1"
or iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
and where in the config do i need to put this in?

TinCanTech

Matanuy wrote @TinCanTech
you only give me the overall how to link. but i have no idea where to put in the code

Because you have not posted your config files, so I was only guessing.

https://forums.openvpn.net/viewtopic.php?f=30&t=22603

Matanuy

TinCanTech wrote
Matanuy wrote @TinCanTech
you only give me the overall how to link. but i have no idea where to put in the code
Because you have not posted your config files, so I was only guessing.

https://forums.openvpn.net/viewtopic.php?f=30&t=22603

My config file is this. now its not the same as back then. but i think the problem is the same.
can you tell me where i need to put in the funktion line so that it works?

client
dev tun
proto udp
remote 212.51.131.164 1194
float
comp-lzo adaptive
keepalive 15 60
auth-user-pass
ns-cert-type server
<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----
</key>
resolv-retry infinite
nobind
[/oconf

TinCanTech

Matanuy wrote can you tell me where i need to put in the funktion line so that it works?

Normally, that would be in your server config.

You posted your private key which means anybody can now connect to your server...