Re: [Openvpn-users] ipset based police routing not works with openvpn.

On Tue, Oct 13, 2015 at 10:23 PM, Hongyi Zhao wrote: > > 2- Using iptables to set the mark value 200 for all of the traffic > which are destinated to google.com: > > $ sudo iptables -t mangle -A PREROUTING -m set --match-set > openvpn-test dst -j MARK --set-mark 200 > This should work for forwa

[Openvpn-users] ipset based police routing not works with openvpn.

Hi all, I'm using Debian Jessie and I use openvpn to connect to the vpngate's free vpn-servers. For my case, I just want to some specific traffics are routed by openvpn, say the traffic to google.com. This should be done by using policy routing based on netfilter's toolchains. And at the same t

Re: [Openvpn-users] Cann't restore route tables based on the previously save route tables when using openvpn.

> Hi, > I see what you mean. It has been a while I have last worked with TUN > adapters. I’m always using TAP. But I remember > that TUN interfaces aren’t > ‘normal’ network devices as we're used to. Look at the net mask definition of > the tungfwlbist > interface. This is a /32. For your Linux