Ubuntu – OpenVPN: Only route a specific IP addresses through VPN

centos7openvpnroutingUbuntu

I have installed OpenVPN with certificates using this tutorial: https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-7 and i use static ip adress with ccd directory.

How can I configure the OpenVPN client to ONLY route traffic through the VPN that is destined for a single, specific IP address?

Example:

https://www.google.com/ -> Direct access without VPN
https://intranet/ -> Connect via VPN (10.8.0.x)

The server is CentOS 7 and the client is Ubuntu

Best Answer

Add to the server config:

push route 10.8.0.x 255.255.255.255

Related Solutions

Windows – how to pass traffic for port 80 not through openvpn

OpenVPN isn't able to filter traffic -- it simply sends the IP packets it is passed over the VPN tunnel. The functionality you want needs to be provided by the operating system. The OS needs to decide whether to route a packet using OpenVPN or using the gateway on the local network. On Linux one would accomplish this using iptables to mark certain packets, and iproute2 to select different routing tables. As far as I know this can't be done on Windows however.

Ubuntu – How to allow an ssh connection only over vpn

You can control it using the ListenAddress directive available in your ssh daemon config file

Something Like

sudo nano /etc/ssh/sshd_config

Reach the line:

#ListenAddress 0.0.0.0

Uncomment if necessary, and edit it accordingly to your vpn configuration, something like:

ListenAddress 10.10.0.1

Restart the daemon

sudo service ssh restart

Check if it works

Keep in mind you can also tune your firewall rules to further restrict access to certain subnet / ports, in this case your vpn network

Hope it helps

Best Answer

Related Solutions

Windows – how to pass traffic for port 80 not through openvpn

Ubuntu – How to allow an ssh connection only over vpn

Related Topic