Fabio/openvpn-install
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow split-tunnel via custom CIDR blocks

Browse source 
This change allows the tunnel to be split-tunnel, routing only the selected subnets through the tunnel. The notation is in CIDR-format.
Example usage:

`sudo PUSH_CIDR_BLOCKS=(192.168.1.0/24 172.16.0.0/16) ./openvpn-install.sh`
This commit is contained in:
brnl 2020-02-28 00:21:13 +01:00 committed by GitHub
parent 006167b3c7
commit 1e9cfc0fbb
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
openvpn-install.sh
View file

@ -787,7 +787,26 @@ ifconfig-pool-persist ipp.txt" >> /etc/openvpn/server.conf
fi
;;
esac
echo 'push "redirect-gateway def1 bypass-dhcp"' >> /etc/openvpn/server.conf
# Allow split-tunnel via custom CIDR blocks (ie. 192.168.0.0/24)
if [ ${#PUSH_CIDR_BLOCKS[@]} -gt 0 ]; then
for cidr in ${PUSH_CIDR_BLOCKS[@]}; do
echo "Adding $cidr to routed subnets...";
ROUTE_IP=$(echo $cidr | cut -d"/" -f1)
ROUTE_BITS=$(echo $cidr | cut -d"/" -f2)
case $ROUTE_BITS in
8) ROUTE_MASK="255.0.0.0" ;;
16) ROUTE_MASK="255.255.0.0" ;;
24) ROUTE_MASK="255.255.255.0" ;;
32) ROUTE_MASK="255.255.255.255" ;;
esac
echo "push \"route ${ROUTE_IP} ${ROUTE_MASK}\"" >> /etc/openvpn/server.conf
done
else
echo 'push "redirect-gateway def1 bypass-dhcp"' >> /etc/openvpn/server.conf
fi
# IPv6 network settings if needed
if [[ "$IPV6_SUPPORT" = 'y' ]]; then