Route only certain destination domains through VPN?

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Goto page Previous  1, 2
Author Message
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12887
Location: Netherlands

PostPosted: Mon Apr 26, 2021 11:45    Post subject: Reply with quote
Could you please rescale your pictures to no more than 768 pixels width otherwise moderators will remove them.

To get the best out of DDWRT and the forum read the forum guidelines with helpful pointers:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

You are running a build which has some security flaws with openvpn which are corrected in the latest builds (46446)

According to the documentation remove everything from the additional config except:
Code:
route dein-ip-check.de 255.255.255.255 vpn_gateway
route speedtest.net 255.255.255.255 vpn_gateway

The jury is still out on:
Code:
pull-filter ignore "auth-token"


Check/enable in the GUI Verify Server Cert. (remote-cert-tls server)

rout-nopull is obsolete.

If you do not want everything via the VPN (and you do not) add:
Code:
pull-filter ignore "redirect-gateway"


If you do not want the pushed DNS servers (if the ip address you route via the VPN are checking DNS you should use the pushed DNS servers otherwise not) then add:
Code:
pull-filter ignore "dhcp-option DNS"


You are not using IPv6 so you should specify udp4 as tunnel protocol otherwise your client is also trying to use (and even prefers) IPv6.

Your compression setting is wrong it should be set to NO (compression is also obsolete and will be deprecated it is a security risk and does not help on these low end routers at all )

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Sponsor
The_Drizzt
DD-WRT Novice


Joined: 14 Apr 2021
Posts: 6

PostPosted: Mon Apr 26, 2021 14:28    Post subject: Reply with quote
Hi egc,

thanks for your great and fast support!
I just made all the changes you told me und updated my router to the latest version.
Switzerland is now working again on PIA so I was able to test my streaming service now.

Everything was working on my old tomato router, but the CPU was too slow for my needs and tomato was simply outdated.
I just found out that one thing was totally different in tomato. I was able to check "Redirect through VPN" and enter a domain for example "stream.com"

Tomato now routed all domains including tv.stream.com
pvr.stream.com, whatever.stream.com through my VPN

dd-wrt seems to behave different, it only routes stream.com though my VPN, but not tv.stream.com and so on...

Is there a generall fix for that? *.stream.com doesn't seem to work here.
My streaming service has hundreds of different adresses based on a simple domain like the one in my example.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12887
Location: Netherlands

PostPosted: Mon Apr 26, 2021 14:35    Post subject: Reply with quote
I can refer to my first answer:

Quote:
For simple things see the policy based routing guide.

For complicated things one of @eibgrads scripts and you can also take a look at IPSET.


for routing of domains and subdomains you need IPSET or (if you know them all you can enter them one by one)

For IPSET see:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261

Reference to @eibgrad's script is of course included Smile

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Goto page Previous  1, 2 Display posts from previous:    Page 2 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum