Discussion:
[Openvpn-users] only route specific traffic?
J. Webster
2010-05-19 16:52:51 UTC
Permalink
Is there a way to get the openvpn client to only route specific traffic through the VPN connection?
I know this is not the usual use of a VPN but I am using my VPN to mainly route client web traffic as a kind of pseudo proxy server but they also need access to RTMP ports.

Secondly, if I wanted to route all port 80 and 8080 traffic from the VPN through the proxy server on the server, can that be done in the server.conf or through iptables?

_________________________________________________________________
http://clk.atdmt.com/UKM/go/197222280/direct/01/
Do you have a story that started on Hotmail? Tell us now
Les Mikesell
2010-05-19 17:21:05 UTC
Permalink
On 5/19/2010 11:52 AM, J. Webster wrote:
>
> Is there a way to get the openvpn client to only route specific traffic through the VPN connection?
> I know this is not the usual use of a VPN but I am using my VPN to mainly route client web traffic as a kind of pseudo proxy server but they also need access to RTMP ports.

The client itself can't do this because packets only go to it after
being routed there.

> Secondly, if I wanted to route all port 80 and 8080 traffic from the VPN through the proxy server on the server, can that be done in the server.conf or through iptables?

Iptables can redirect packets based on destination ports - but expect to
be very confused if you ever need to debug the traffic with traceroute, etc.

--
Les Mikesell
***@gmail.com
J. Webster
2010-05-19 21:31:12 UTC
Permalink
What's the best way to monitor the traffic coming through OpenVPN?
I mean specifically web traffic ie in the same way that squid analyzes and logs all http requests.

----------------------------------------
> Date: Wed, 19 May 2010 12:21:05 -0500
> From: ***@gmail.com
> To: openvpn-***@lists.sourceforge.net
> Subject: Re: [Openvpn-users] only route specific traffic?
>
> On 5/19/2010 11:52 AM, J. Webster wrote:
>>
>> Is there a way to get the openvpn client to only route specific traffic through the VPN connection?
>> I know this is not the usual use of a VPN but I am using my VPN to mainly route client web traffic as a kind of pseudo proxy server but they also need access to RTMP ports.
>
> The client itself can't do this because packets only go to it after
> being routed there.
>
>> Secondly, if I wanted to route all port 80 and 8080 traffic from the VPN through the proxy server on the server, can that be done in the server.conf or through iptables?
>
> Iptables can redirect packets based on destination ports - but expect to
> be very confused if you ever need to debug the traffic with traceroute, etc.
>
> --
> Les Mikesell
> ***@gmail.com
>
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-***@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users

_________________________________________________________________
http://clk.atdmt.com/UKM/go/197222280/direct/01/
Do you have a story that started on Hotmail? Tell us now
Erich Titl
2010-05-20 06:05:23 UTC
Permalink
Hi

at 19.05.2010 23:31, J. Webster wrote:
>
> What's the best way to monitor the traffic coming through OpenVPN?
> I mean specifically web traffic ie in the same way that squid analyzes and logs all http requests.

I guess it would be easiest to just force this traffic transparently
through a squid instance on the server.

cheers

Erich
Loading...