Jump to content
Not connected, Your IP: 3.236.110.106

Recommended Posts

Hi,

 

Have given my SmartTV which runs Amazon Prime, BBC iPlayer, etc a static IP, and want to bypass the VPN which I run on my DSL-AC68U. As its the DSL model I can't run the Merlin firmware, just the official Asus firmware. After Googling have tried configuring via SSH (have done similar for port forwarding previously) I have a script, but its not working as expected, when applied lose connectivity for the TV, but works for everything else. Did try 1 script I found which gave the TV access by bypassing the TV but killed the internet for everything else, however have since lost the link.

 

As someone on here last time I got stuck spotted where I had gone wrong, I am hoping someone can see again! The current script for the config I am running is as follows.

 

 

echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter  
ip route flush table 100
ip route del default table 100
ip rule del fwmark 1 table 100
ip route flush cache
iptables -t mangle -F PREROUTING
ip route show table main | grep -Ev ^default | grep -Ev tun15 \
| while read ROUTE ; do
ip route add table 100 $ROUTE
done
ip route add default table 100 via $(nvram get wan0_gateway)
ip rule add fwmark 1 table 100
ip route flush cache
iptables -t mangle -A PREROUTING -i br0 -j MARK --set-mark 0
iptables -t mangle -A PREROUTING -i br0 -m iprange --src-range 192.168.1.11 -j MARK --set-mark 1
 

output of ip route show is below which may help.

 

lurch@(none):/tmp/mnt/LABEL/asusware.arm# ip route show
89.243.144.1 dev vlan3880  proto kernel  scope link 
217.151.98.167 via <GW-HIDDEN> dev vlan3880 
169.254.0.1 dev vlan2  scope link 
192.168.1.0/24 dev br0  proto kernel  scope link  src 192.168.1.254 
<IP-HIDDDEN>/20 dev vlan3880  proto kernel  scope link  src <IP-HIDDEN> 
10.4.0.0/16 dev tun15  proto kernel  scope link  src 10.4.18.0 
169.254.0.0/16 dev vlan2  proto kernel  scope link  src 169.254.70.103 
127.0.0.0/8 dev lo  scope link 
0.0.0.0/1 via 10.4.0.1 dev tun15 
128.0.0.0/1 via 10.4.0.1 dev tun15 
default via 89.243.144.1 dev vlan3880 
 

 

Share this post


Link to post

Hi,

 

Just thought would update that after finding a couple of similar scripts and mashing the 2 together that have a working script I've got saved on my router which achieves the goal of my TV now bypassing the VPN running on my router. For those who are stuck using ASUS own ASUSWRT firmware the script I am using is below. I have it saved on memory stick so that can run it directly on the router via SSH.

 

  echo #!/bin/sh
nvram set no_vpn_lst="192.168.1.11"
nvram commit


sleep 30
NO_VPN_LST=`nvram get no_vpn_lst`
[ -z "$NO_VPN_LST" ] && exit 0
WAN_GWAY="0.0.0.0"
while [ $WAN_GWAY == "0.0.0.0" ]; do
sleep 3
WAN_GWAY=`nvram get wan0_gateway`
done
ip route add default via $WAN_GWAY table 10
for ipa in $NO_VPN_LST; do
ip rule add from $ipa table 10
done
ip route flush cache
exit 0
 

 

If you want more than 1 IP to bypass then you add additional IPs to the no_vpn_lst section just leaving a space between the IPs. Script needs running after each reboot and possibly if your DSL or VPN connection drops out and reconnects. 

Share this post


Link to post
Posted ... (edited)

Just tried the script, but does not seem to be working with my 4g-ac53u with the latest Asus firmware version 3.0.0.4.384_81975-g4290df7. Can you please confirm if it still works? 

Edited ... by thomasl78
updates

Share this post


Link to post
3 hours ago, thomasl78 said:

Just tried the script, but does not seem to be working with my 4g-ac53u with the latest Asus firmware version 3.0.0.4.384_81975-g4290df7. Can you please confirm if it still works? 


Some logs would help, at least post the errors you get, if any. Or at the very least outline what doesn't work. The question at the end is of little use to anyone but you…

» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.

 

» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post


Link to post
Posted ... (edited)
On 7/1/2021 at 3:54 AM, OpenSourcerer said:

Some logs would help, at least post the errors you get, if any. Or at the very least outline what doesn't work. The question at the end is of little use to anyone but you…
HI, thanks for replying. 
Here's some more info with this script on this 4g-ac53u router. 
I can run the script without error. However, I can not surf Internet and traceroute command fails after the script run. 

Ping command works fine on the workstation 192.168.1.11 and I do notice a response time difference before and after the script run. So I believe routing may have been updated. 

screen shot as below. Thanks. 

image.png.2ef7f936f67e390a2885470003c38068.png Edited ... by thomasl78

Share this post


Link to post

I tried a similar dsl model with the AsusWRT firmware. I remember that i could specify which devices traffic get routed through the vpn and which not. Isnt this the case in your router?
Btw in the case you use your DSL Router not as the DSL receiver but as a WAN Router then you can deploy Merlin on it.

Maybe this helps

 

 

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...