[CentOS] IP forwarding and OpenVPN

[Les Mikesell]

On 11/4/2010 9:50 AM, Bart Schaefer wrote:
> On Thu, Nov 4, 2010 at 5:49 AM, Les Mikesell<lesmikesell at gmail.com>  wrote:
>> Quick check is a traceroute from the remote server to a 192.168.144.x address.
>> If it doesn't go into the tunnel interface you need to add a route for the range
>> via the remote tunnel ip.
>
> Hrm.  When I try to add such a route on one of the machines I want to
> reach, I get "SIOCADDRT: Network is unreachable".

That means you don't already have a direct route to the IP you specified 
as the gateway address.  You should have used the IP of the remote 
tunnel interface endpoint which should be reachable when the tunnel is 
up (ifconfig should show both your local ip and the ptp remote ip).

> Maybe the simplest thing is to change the question:  How can I cause
> packets forwarded from my LAN to avoid the VPN and go out via the
> regular default route?

Packets go to the most specific route - so anything not specified in a 
route statement or connected directly will go to the default gateway.
"route -n" will display the routing table and if you understand how 
netmasks work you can see where everything will go on the next hop.

-- 
   Les Mikesell
    lesmikesell at gmail.com