Re: [PLUG] OpenVPN Question

["Keith C. Perry" <kperry@daotechnologies.com>]

Rich, very cool.  iproute2 for the win!  That seems like the best way to handle things too.  Its a routing issue so lets resolve it with routing infrastructure instead of a NATing magic  :)

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 
Keith C. Perry, MS E.E. 
Owner, DAO Technologies LLC 
(O) +1.215.525.4165 x2033 
(M) +1.215.432.5167 
www.daotechnologies.com

----- Original Message -----
From: "Rich Freeman" <r-plug@thefreemanclan.net>
To: "Philadelphia Linux User's Group Discussion List" <plug@lists.phillylinux.org>
Sent: Sunday, September 28, 2014 6:08:54 PM
Subject: Re: [PLUG] OpenVPN Question

On Fri, Sep 26, 2014 at 10:49 PM, Rich Freeman
<r-plug@thefreemanclan.net> wrote:
> I have a routing question and I'm not quite sure how linux will handle
> this situation.
>

FYI, I was able to follow some recipes online and do this:
cite: http://serverfault.com/questions/225185/route-return-traffic-to-correct-gateway-depending-on-service

echo "101 outside" >> /etc/iproute2/rt_tables
ip route add default table outside via 192.168.0.102
ip rule add fwmark 1 table outside
iptables -t mangle -A OUTPUT -p tcp -m tcp --sport 22 -j MARK --set-mark 1

Now ssh connections go out over 192.168.0.102, and other connections
go out via the default route.

--
Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug