Page 1 of 1
Client config: how to exclude traffic from a specified .EXE?
Posted: Sat May 09, 2015 1:30 pm
by Guilio
Hello all,
Pretty much what the titles says.. I'm using the latest version of OpenVPN on Windows 8.1 to connect to a VPN provider using their client config file. However, I would like a few programs to directly connect to the internet and thereby bypassing the VPN.
How do I do this? It is obvious the only thing I can edit from my side is the client config file so I was hoping it can be done from in there. Alternatively I could settle for the port(s) these programs use if excluding a .EXE is not going to work.
Thanks a lot,
G
Re: Client config: how to exclude traffic from a specified .
Posted: Sun May 10, 2015 3:20 pm
by maikcat
in linux you can setup policy based routing to route specific ports over specific gateways
in windows you will have to google and see if something relevant comes up...
Michael.
Re: Client config: how to exclude traffic from a specified .
Posted: Mon May 11, 2015 9:56 am
by Guilio
So far the only workaround Ive been able to come up with is using
route destinationname 255.255.255.255 net_gateway
Downside of this is that as soon as the destination to which the programs I would like to exclude changes, I have to manually edit the client config. I know the VPN manager from Astrill is based on OpenVPN and supports filtering. Hence I was under the assumption it could also be done from within the vanilla OpenVPN manager..
Re: Client config: how to exclude traffic from a specified .
Posted: Mon May 11, 2015 11:01 am
by maikcat
the route type solution does nothing more that creating static routes to specific hosts,
not redirecting traffic based on port/proto combo or by specific exe process,
VPN manager from Astrill is based on OpenVPN and supports filtering
I am not aware of their manager, what exactly do you mean by filtering?
openvpn operates as layer2/3 and does NOT perform any type of filtering...
Michael.
Re: Client config: how to exclude traffic from a specified .
Posted: Mon May 11, 2015 1:28 pm
by Guilio
Their GUI offers filter options such as excluding traffic to/from specific .EXEs running on the client's PC from the VPN and having those .EXEs connect to whatever it is they connect to directly.
Anyway, it looks like if I want to exclude certain traffic from going through the VPN I have to do it like I described earlier: knowing the external name/IP the program connects to and entering those in the route command in the client config.