Iptables Bypass VPN for specific IP destinations ( From Eth1 -> tun0 to Eth1-> eth0 for IP X )

Chris

1/2/24, 11:55 PM

I currently have Raspberry PI setup as VPN Router. Everything works great except I'm unable to run my work VPN behind it at the same time. Rather than disable the whole house security, I'd like to add a firewall rule to bypass the VPN for a specific IP.

Work VPN Public IP: 15.15.15.15 eth0 Raspberry PI: 192.168.43.1 (LAN) eth1 Raspberry PI: XX.3.1.209 (PUBLIC)

Here is the current route script that came pre-setup vpn-route.sh:

#!/bin/bash
LAN=$(</usr/local/bin/lan.conf) # 192.168.0.0/16
sudo iptables -F
sudo iptables -t nat -F
sudo iptables -t nat -A POSTROUTING -d $LAN -o eth0  
sudo iptables -t nat -A POSTROUTING ! -d $LAN -o tun0 -j MASQUERADE
sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i wlan0  -o eth0 -j ACCEPT


sudo sh -c "iptables-save > /etc/iptables.ipv4.nat"

Is there a way I can add a second masquerade only by matching the destination IP like this?

sudo iptables -t nat -A POSTROUTING --dst 15.15.15.15 -o eth0  -j MASQUERADE # didn't seem to work

103

0 + 1

iptables

openvpn

routes

Chris

1/3/24, 2:04 AM

Looks like https://github.com/ShVerni/Raspberry-Pi-VPN-Gateway/blob/6e60146601dc5dec6ba20b8fb30d205c080ee8f0/InstallVPN.sh#L271 Might be something similar. Not sure how the mark stuff works.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Iptables Bypass VPN for specific IP destinations ( From Eth1 -> tun0 to Eth1-> eth0 for IP X )

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.