2
I'm using OpenVPN on Windows 10. I'd like to exclude traffic on certain ports (for example, SSH) from the VPN and instead use the underlying network. Can this be done?
On Linux, I'd imagine using iptables
with -p tcp --dport 22
to redirect to the underlying device instead of the VPN tunnel device to do this. What are my options on Windows?
The VPN has (so far) assigned me an IP in the 10.9.0.0/16
range. The underlying network gives me an IP in 10.13.0.0/16
, and most of my SSH traffic goes to 10.105.0.0/16
in the underlying network, or to Github (nslookup
tells me that's 192.30.252.128
).
OpenVPNs client doesn't support this, some commercial VPN products do to my knowledge. – Linef4ult – 2015-11-09T12:22:45.920
@Linef4ult so this must be handled by the VPN client? Nothing to be done on the OS side? – muru – 2015-11-09T15:13:15.280
@muru -- Is the host you want to
ssh
to in the same LAN as the VPN client or a different one ? Please add full details to your question – dotvotdot – 2015-11-12T12:27:39.807@dotvotdot could be either - I might want to SSH to Github or to a PC in the next room. Does it make a difference? – muru – 2015-11-12T12:28:49.597
The problem leads to very complicated routing rules. If you add two examples to your question I will try to answer those specifically. – dotvotdot – 2015-11-12T12:41:35.530
@dotvotdot I'd prefer a general answer, but I have added more details. – muru – 2015-11-12T12:46:21.030