Additional routing policy when redirecting all internet traffic through OpenVPN

[steh]

I think this might be a feature request.
I'm running a RT-N66U with Asuswrt-Merlin 378.54_1.
The N66U is an OpenVPN client. The connection works. When I set "Redirect Internet traffic" to "All traffic" the default route is set to go through the VPN.
This is unfortunate: My ISP pings my WAN-IP. If I don't respond my connection is terminated.
With all traffic going through the VPN also the reply packets of the ICMP ping seem to come from a server that never was pinged. My ISP cuts the connection.

Is it possible to sent back ping replies over the interface which received them? (Ignore the default route for incoming pings?)

I believe I followed this https://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/ website for a workaround for my directly connected Linux Computer.

 

[RMerlin]

I think this might be a feature request.
I'm running a RT-N66U with Asuswrt-Merlin 378.54_1.
The N66U is an OpenVPN client. The connection works. When I set "Redirect Internet traffic" to "All traffic" the default route is set to go through the VPN.
This is unfortunate: My ISP pings my WAN-IP. If I don't respond my connection is terminated.
With all traffic going through the VPN also the reply packets of the ICMP ping seem to come from a server that never was pinged. My ISP cuts the connection.

Is it possible to sent back ping replies over the interface which received them? (Ignore the default route for incoming pings?)

I believe I followed this https://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/ website for a workaround for my directly connected Linux Computer.

Switch to Policy-based routing instead.

 

[steh]

With policy based routing now all my traffic traffic goes through VPN, except everything targeting the host from which the pings come.

all vpn    192.168.0.0/24    0.0.0.0/0    VPN
ISP-pinger    0.0.0.0/0    10.0.8.1/32    WAN

That's a bit more than just replying to the ping, but it works.

Thanks for pointing that out.

 

[RMerlin]

With policy based routing now all my traffic traffic goes through VPN, except everything targeting the host from which the pings come.

all vpn    192.168.0.0/24    0.0.0.0/0    VPN
ISP-pinger    0.0.0.0/0    10.0.8.1/32    WAN

That's a bit more than just replying to the ping, but it works.

Thanks for pointing that out.

Does your ISP always ping you from the same IP? If yes, then you could specify that IP in your rule.

 

[steh]

Yes. In the obfuscated example 10.0.8.1 is the host that pings me.