Iptables GL-iNet

TheJoker · 2019-12-04T22:35:13.825Z

Hi all,

I need help to configure the custom-rules on the GL Inet.

During active openvpn connection I can’t connect to the NAS on the other local network of the fritzbox router, when I switch off openvpn all is working.

Of course all other communication shut run over openvpn!.

Picture of network structure
5e1c619fc2a10b3640a76fc232de6ba4|690x274

Nas has the IP adress 192.168.102.11

Please help to configured

hansome · 2019-12-06T08:05:28.405Z

image905×698 30.4 KB

TheJoker · 2019-12-07T07:58:15.534Z

Hi,

thanks for the input and help but no success

I did this like recommended

setup890×712 43.6 KB

but was not working, if I disable VPN ping is OK

Ping without OpenVPN618×505 64 KB

With OpenVPN not working.

Ping with OpenVPN616×547 71.8 KB

Please help further! also Netflix and so on. must be opened without VPN.

cu

TheJoker · 2019-12-11T18:24:37.604Z

Can nobody help??? Technical support please help!.

robotluo · 2019-12-12T11:47:07.445Z

Hi,
Can you execute the following command on the GL router and tell me the result?

ip route show table 52

TheJoker · 2019-12-12T18:09:27.171Z

Attached the table !

Unbenannt827×525 52 KB

robotluo · 2019-12-13T11:39:16.244Z

Check whether the IP you set is in the bypass table of ipset first

ipset list gl_bypass_vpn_domain

And then you can check the routing path on the GL router using the following command

ip route get 192.168.102.11 from 192.168.8.111 iif br-lan mark 0x80000

TheJoker · 2019-12-13T20:23:37.161Z

Hi,

attached the picture.

11241×480 49.5 KB

TheJoker · 2019-12-18T12:57:05.956Z

No help !!!, please support

TheJoker · 2019-12-21T11:54:10.103Z

Any news, any help ???

ThH · 2019-12-21T14:16:23.283Z

I deleted previous post as I overread some information, which made my post senseless.

Nevertheless, as you have written that Netflix and other also should not use the VPN would it be an option to rather specify what should use VPN instead of what should not?

TheJoker · 2019-12-23T17:38:07.881Z

Hi,

that is maybe correct but the goal shut be first to get this work so…
So please somebody can help what to do!

ThH · 2019-12-23T17:52:17.248Z

I agreed. First it should work, therefore I would first try the other way around, because if that also is not working, it may be easier to rule out other options.

You could try adding this to your openVPN client config

route 192.168.102.0 255.255.255.0 net_gateway

robotluo · 2019-12-24T02:45:46.445Z

I’m very sorry that I didn’t notice your message. If you want to call me, you can directly @me.
You can try adding the following firewall rules

iptables -I FORWARD  -d 192.168.102.0/24 -j ACCEPT