well, no, not really. the main routing table is the routing "last resort". it just overrides the default route (via WAN) to be via VPN if no other routes could be found (for unknown destinations). but the main routing table is maintained by the kernel mostly and contains a lot of routes throughout your system that i.e. local packages will use to find their way to the target.
when you use policy routing an extra table is created but this only containes the very basic routes (as a measure to make sure that routing will be to VPN and nowhere else). forcing local packages to use this sparse table obviously doesnt work. maybee
@chongnt has some time to experiment to see if he can make it work.
so what you need to do is to reverse the process to create a routing table without VPN routing and a rule for your camera to use this table instead.
create a wgm custom script:
Code:
nano /jffs/addons/wireguard/Scripts/wg11-up.sh
populate the file with:
Code:
#!/bin/sh
#
#################################
# Create ip table 117 without VPN
#################################
ip route flush table 117 2>/dev/null # Clear table 117
ip route show table main | while read ROUTE # Copy all routes from main table to table 117 except wg0 routes
do
{
if ! echo "$ROUTE" | grep 'wg11' ; then
ip route add table 117 $ROUTE
fi
} 1> /dev/null
done
###############################
#################################
# Add rules for which to use this table
#################################
ip rule add from 192.168.50.150 table 117 prio 9990
# More rules for single ip's could be added here if needed....
#################################
#################################
# Clear route cache so routing will start over
#################################
ip route flush cache
#################################
create another wgm custom script:
Code:
nano /jffs/addons/wireguard/Scripts/wg11-down.sh
populate it with:
Code:
#!/bin/sh
# Delete rules:
ip rule del prio 9990
# Delete table 117:
ip route flush table 117 2>/dev/null
Set your files to be executable:
Code:
chmod +x /jffs/addons/wireguard/Scripts/wg11-up.sh
chmod +x /jffs/addons/wireguard/Scripts/wg11-down.sh
run up- script manually to get it started right away (it will from now on be executed after wgm starts wg11)
Code:
/jffs/addons/wireguard/Scripts/wg11-up.sh
if you experience any problems you could just run the -down script manually and if you dont wont them you could delete them or move them somewhere else....
good luck!
//Zeb
