How to route specific traffic through OpenVPN?

Question

I'm running a server at home with rtorrent and apache2. I would like to route my rtorrent traffic via OpenVPN and since im kinda new to OpenVPN and iptables i would like to have a user friendly guide.

What i've tried: I've been googling for 2 days on the subject but i havent found anything that could help me. I have tested the tunnel with openvpn and it routes my ip correct but heres the problem. Since i run a apache2 server it stops working (of course) when the tunnel is active.

What i want: I want the tunnel to be active but not to be default and that only rtorrent traffic should pass through it and last but not least that rtorrent ONLY should connect over VPN.

Anyone up for the task of teaching me?

Solution

I've managed to solve this with two main steps:

1. Choose a service provider that uses TUN interface.
2. A little bit more table routing

The Table routing

I've read the most useful howto over at http://lartc.org/howto/ and followed the provided steps there.

My setup is now two physical nic (eth0 and eth1) divided over three tables (main, T1 and T2). T1(eth1) routes the default stuff (apache2, ssh etc.) and T2(eth0) is just for rtorrent connections.

It works like a charm. So if you have the same issue read up over at lartc.org and the problem will be solved.

Note

I have not tried this config with TAP interface so I cannot say if it works or not.

Comments

[junkyhlm]

I've been trying and trying. I dont seem to have the technical knowledge to get this to work. I've posten the question on SU to. Hopefully someone can help me.

[junkyhlm]

I think i've got a workaround using two NIC's,the wordpress guide you mentioned and binding openvpn to the other NIC. I'm going to test this tonight and will post here if i'll succeeed.

[junkyhlm]

yesterday's fix did not work. I wasn't able to setup a vlan om the same subnet as my ethernet. so i'm back to square one. The good part is that i'm now quite good at create advanced routing tables :)