I use openVPN to connect to a server at work. However, I only want to use the VPN for work-related stuff and not for my regular browsing. I don't really know much about VPNs, so it's entirely possible this is already the case, but I'm not sure.
My current client configuration is:
$ cat CRSSLconfig.tblk/client.ovpn client dev tun port 8440 connect-retry 0 proto tcp-client remote 123.456.78.9 resolv-retry infinite nobind persist-key persist-tun auth-user-pass login.conf comp-lzo auth-retry interact verb 3 reneg-sec 0 status crssl_client_status.log ca ca.pem cert cert.pem key userkey.key
And I connect by running
sudo openvpn client.ovpn
In case it's relevant, I am running OpenVPN 2.3.8 on 64 bit Arch.
A reverse DNS lookup on my IP shows that it points to my local ISP:
$ host $(wget -qO - http://wtfismyip.com/text) 252.224.246.46.in-addr.arpa domain name pointer 22.214.171.124.my.isp.com
The output of
ip a (
22.33.44 IPs are on the VPN):
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: enp3s5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 00:1f:c6:cb:2f:20 brd ff:ff:ff:ff:ff:ff inet 192.168.1.103/24 brd 192.168.1.255 scope global enp3s5 valid_lft forever preferred_lft forever inet6 fe80::1cfa:c27c:6982:369a/64 scope link valid_lft forever preferred_lft forever 9: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 100 link/none inet 126.96.36.199/24 brd 188.8.131.52 scope global tun0 valid_lft forever preferred_lft forever
My routing table as reported by
ip route show is:
$ ip route show default via 192.168.1.1 dev enp3s5 metric 202 184.108.40.206/24 via 220.127.116.11 dev tun0 18.104.22.168/24 dev tun0 proto kernel scope link src 22.214.171.124 192.168.1.0/24 dev enp3s5 proto kernel scope link src 192.168.1.103 metric 202
22.33.44.NN addresses all correspond to IPs on the VPN network. I have changed the first three digit groups but not the last (so the
126.96.36.199 is actually the gateway, for example).
Is that enough to conclude that normal internet traffic isn't going through the VPN? How can I i) check what connections are being routed through the VPN and ii) configure the VPN to only work for specific connections? I don't have access to the server config, is this something I can configure from the client?