TomatoUSB

Hello,

I have no clue how to really do it… I'm new to all this.
I want to have that specific IPs go through my ISP and that other IPs go through my OpenVPN. And if the VPN fails (is not connected) that the IPs for that VPN get dropped so that I don't have ip-leaks.

- IPs 192.168.1.105 to 192.168.1.199 on ISP
- IPs 192.168.1.2 to 192.168.1.104 on openVPN

All I can get done ist a single policy routing OR a complete drop if the VPN fails (when I still had DD-wrt)

ip rule add from ISP.ISP.ISP.1 table 10
ip route add from 192.168.1.107 table 10

iptables -I FORWARD -i br0 -o vlan2 -j DROP

Whith everything else I tried I failed and on DD-WRT I didn't get much help.
Now I do hope that getting help here is better just like the FW. :-D

Can anybody plz tell me how to exactly do it?

Edit:
Tomato Firmware 1.28.0000 MIPSR2-108 K26 USB AIO-64K
Asus N66U

The VPN has a permanent IP but becuase of some technical causes the IP from my ISP keeps changing after a few days for weeks now (sometimes within 24h).
If possible I would like to have it so that I don't have to keep editing the ISP-IP inside the firewall.

Did you try the techniques described in:

http://tomatousb.org/tut:openvpn-via-password-authentication

?

If you want to make sure there are no traffic leaks, just make sure the table redirect is added even before the VPN connection is initiated and it is not removed in the vpn connection is dropped.

In practice you don't need any iptable rules for this. As the packets will simply fail to route if the routing table does not have a valid gateway defined.

The one caveat I can think of is you might want to disable RIPv1 and RIPv2, as the automatic routing rules might route around your VPN connection.

thnx docbill, that's exactly what I need as far as I can say, specially because I'm using ibVPN. But all that seems to go beyond my skills.
In that "how to" there seems to be some steps I'm missing with my very small knowledge.
Example: "Create the followings script as /opt/etc/openvpn/route.sh" Create it via Putty? D'OH!

And I don't have any idea of how to do so with the tips you are giving me.

I know I'm asking a lot now, but could you or somebody else give me a real nice "step by step" for Noobs? ;-)

All I could handle till now is the "easy" how to with tomato from ibVPN (Can't post the link here) and fouling arround with the Firewall as mentioned before