There a millions of sites which describe how to configure the network routing to send all traffic through the VPN tunnel. However, what is the exact opposite?
There is an OpenVPN server configured on the pfSense firewall, and only certain destinations should pass the VPN tunnel. The default route should not use the tunnel.
route -n
Ziel Router Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.x.x 0.0.0.0 UG 50 0 0 tun0
0.0.0.0 192.168.y.y 0.0.0.0 UG 600 0 0 wlp2s0
(Obvisouly, either 1st line is too much or its Metric should be >600).
I want this to be set in Linux Networkmanager and Windows 10. How to do that? PfSense can only force the default gateway to point to the tunnel, so I think that the decision of not using the tunnel for the default route is up to the client.