Skip to content

Conversation

@maciekish
Copy link

Hi, thank you for your work. I was missing the option to split the VPN based on destination ports, so this is what i added. The use case is simple, i live in Qatar and things like Facetime are blocked because they do not have a license to operate telecommunication services in the country 🙄. So i added support for the following in the vpn.conf and add-vpn-iptables-rules.sh:

FORCED_DEST_IPV4_PORT="udp-0.0.0.0/0-3478:3489 udp-0.0.0.0/0-3490:3497 tcp-0.0.0.0/0-5223 udp-0.0.0.0/0-16384:16387,16393:16402"
FORCED_DEST_IPV6_PORT="udp-::/0-3478:3489 udp-::/0-3490:3497 tcp-::/0-5223 udp-::/0-16384:16387,16393:16402"

And also matching exemptions for completeness, even though i dont use them:

EXEMPT_DEST_IPV4_PORT=""
EXEMPT_DEST_IPV6_PORT=""

It's now possible to send specific services like Facetime over VPN while letting everything else go out over the local WAN to avoid latency or other slowdowns caused by VPNs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant